CLEANSTART-2026-JE73993: jsoup through 1
Published Nov 13, 2026
·Updated
CVE-2026-75140 affects multiple packages. jsoup through 1. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/wso2am<4.7.0-r5
4.7.0-r5
cleanstart/wso2mi<4.6.0-r11
4.6.0-r11
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r11
Event History
Nov 13, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What level of access does an attacker need?
The CVSS vector indicates network-based exploitation with low attack complexity. No privileges or user interaction are required.
2
What is the expected impact if exploited?
The listed CVSS vector indicates high impact to availability, with no indicated confidentiality or integrity impact. The scope is unchanged.
3
Which deployments should be prioritized for review?
Review deployments of cleanstart/wso2am and cleanstart/wso2mi that include jsoup through version 1. The advisory states that multiple packages are affected.