Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #12

High-severity denial-of-service flaw flagged in jsoup library

Original: 🚨 EUVD-2021-1791 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: jsoup 🏢 Vendor: jhy 📅 Published: 2021-08-18 | Updated: 2026-10-0

A vulnerability tracked as EUVD-2021-1791, scored 7.5 out of 10 under CVSS v3.1, affects jsoup, a widely used Java library for parsing HTML. Applications using jsoup versions prior to 1.14.2 to process untrusted HTML or XML can be knocked offline by denial-of-service attacks. The advisory, first published in August 2021 and updated in October 2026, recommends updating to a patched release. Security teams are being urged to check whether their Java dependencies include an affected version.

Why now: The advisory's recent update keeps the vulnerability in security feeds, prompting developers to check and patch their jsoup dependencies.

jsoupjhyEUVD-2021-1791

Open on mastodon →

Evidence

• 🚨 EUVD-2021-1791 📊 Score: 7.5/10 (CVSS v3.1) 📦 Product: jsoup 🏢 Vendor: jhy 📅 Published: 2021-08-18 | Updated: 2026-10-08 📝 jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks.… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/1535384