RHLW-2026-66f17e66f457e38b: Lightwell Security Advisory: jsoup 1.16.1.rhlw-00004
Published Nov 11, 2026
·Updated
Red Hat Lightwell has released org.jsoup:jsoup 1.16.1.rhlw-00004 with backported fixes for CVE-2026-71497 and CVE-2026-75140.
CVE-2026-71497: jsoup: Cleaner may expose markup with custom raw-text elements
CVE-2026-75140: jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
This patched artifact is a drop-in replacement for org.jsoup:jsoup 1.16.1 from Maven Central.
Affected Software
1 affected componentFixes available
red-hat-lightwell/org.jsoup:jsoup<1.16.1.rhlw-00004
1.16.1.rhlw-00004
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
red-hat-lightwell/org.jsoup:jsoupto a version that resolves this vulnerability.Fixed in 1.16.1.rhlw-00004 - Upgrade
Upgrade
org.jsoup:jsoupto a version that resolves this vulnerability.Fixed in 1.16.1.rhlw-00004
Event History
Nov 11, 2026
Advisory Published
via OSV·09:33 PM
Data Sourced
via OSV·09:33 PM
DescriptionSeverityAffected Software
Child vulnerabilities
Contains the following vulnerabilities.