CLEANSTART-2026-ZN65796: jsoup is a Java library for working with real-world HTML
CVE-2026-71497 affects multiple packages. jsoup is a Java library for working with real-world HTML. See references for individual vulnerability details.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/wso2amto a version that resolves this vulnerability.Fixed in 4.7.0-r5 - Upgrade
Upgrade
cleanstart/wso2mito a version that resolves this vulnerability.Fixed in 4.6.0-r11
Event History
Frequently Asked Questions
What conditions are required for exploitation?
The vector is network-accessible, requires high attack complexity, does not require attacker privileges, and requires user interaction. The CVSS vector indicates scope can change, with low confidentiality and integrity impact and no availability impact.
Which listed products should be triaged?
The affected software list identifies cleanstart/wso2am and cleanstart/wso2mi. The provided data does not identify affected versions or show how jsoup is included in either product.
Can the provided information confirm whether a specific deployment is affected?
No. It does not provide version ranges, dependency versions, or configuration conditions; the referenced advisory and CVE records are needed for package-specific details.