CVE-2026-75140

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-75140
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75140.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-75140
Aliases
Downstream
AZL (1)
CGA (254)
CLEANSTART (5)
DEBIAN (1)
ECHO (1)
MINI (16)
openSUSE (2)
ROOT (1)
SUSE (3)
UBUNTU (1)
Related
openSUSE (2)
SUSE (3)
Published
2026-08-20T15:56:50Z
Modified
2026-10-24T02:49:59Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
Details

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-770"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75140.json"
}
References

Affected packages

Git / github.com/jhy/jsoup

Affected ranges

Type
GIT
Repo
https://github.com/jhy/jsoup
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
862ba2f1d48ee95609183dbcfc848c9fd7afc76a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "1.23.1"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        },
        {
            "range":  [
                {
                    "fixed":  "862ba2f1d48ee95609183dbcfc848c9fd7afc76a"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

1.*
1.12.2
jsoup-1.*
jsoup-1.10.1
jsoup-1.10.2
jsoup-1.11.1
jsoup-1.11.2
jsoup-1.11.3
jsoup-1.12.1
jsoup-1.12.2
jsoup-1.13.1
jsoup-1.14.1
jsoup-1.14.2
jsoup-1.14.3
jsoup-1.15.1
jsoup-1.15.2
jsoup-1.15.3
jsoup-1.15.4
jsoup-1.16.1
jsoup-1.16.2
jsoup-1.17.1
jsoup-1.17.2
jsoup-1.18.1
jsoup-1.18.2
jsoup-1.18.3
jsoup-1.19.1
jsoup-1.20.1
jsoup-1.21.1
jsoup-1.21.2
jsoup-1.22.1
jsoup-1.22.2
jsoup-1.23.1
jsoup-1.6.2
jsoup-1.6.3
jsoup-1.7.1
jsoup-1.7.2
jsoup-1.7.3
jsoup-1.8.1.a
jsoup-1.8.2
jsoup-1.8.3
jsoup-1.8.3a
jsoup-1.9.1
jsoup-1.9.1a
jsoup-1.9.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75140.json"