CVE-2026-75140

Name of the Vulnerable Software and Affected Versions jsoup versions prior to 1.23.2

Description An uncontrolled resource consumption issue exists in the XmlTreeBuilder function. A remote attacker can exhaust JVM heap memory by providing a deeply nested XML document containing uniquely-namespaced elements. This occurs because the builder copies the entire inherited namespace map at every start element, resulting in quadratic time and memory complexity. This can lead to an OutOfMemoryError, causing the application to terminate.

Recommendations Update to a version that includes commit 862ba2f.