Jsoup before 1.8.3 was vulnerable to a possible XSS issue in the validator, related to how it handled tags without a closing '>' when reaching EOF (CVE-2015-6748).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2015-0340.json"