CVE-2026-71497

{
  "id": "CVE-2026-71497",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-06T22:18:32.043",
  "lastModified": "2026-10-24T15:10:00.190",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup's built-in Safelists are not affected. This issue is fixed in version 1.23.1."
    },
    {
      "lang": "es",
      "value": "jsoup es una biblioteca Java para trabajar con HTML del mundo real. Desde la versión 1.14.3 hasta la 1.23.1, el analizador HTML de jsoup podía manejar incorrectamente un nombre de etiqueta malformado que terminaba en un carácter de control, lo que provocaba que la etiqueta adquiriera el comportamiento de análisis de un elemento diferente. Cuando una Safelist personalizada permite ciertos elementos de texto sin formato, este análisis incorrecto puede hacer que el contenido que debería permanecer como texto inerte se emita como marcado activo después de la serialización, lo que podría resultar en cross-site scripting. Las Safelists integradas de jsoup no se ven afectadas. Este problema se ha solucionado en la versión 1.23.1."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "jhy",
          "product": "jsoup",
          "versions": [
            {
              "version": ">= 1.14.3, < 1.23.1",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "baseScore": 4.7,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "HIGH",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.6,
        "impactScore": 2.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-07T14:37:48.066416Z",
          "id": "CVE-2026-71497",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/jhy/jsoup/issues/2538",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.1",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8",
      "source": "[email protected]"
    }
  ]
}