Jsoup Bug Bust: Unexpected Exceptions Could Lead to Denial of Service

Posted by Hacman123 on Wednesday August 18, 2021 @09:54AM
from the jsoup.org dept.

https://jsoup.org/news/release-1.14.2

( 1 comment | 3 points | on HN )

Re:Jsoup Bug Bust: Unexpected Exceptions Could Lead to Denia... by Hacman123 on Wednesday August 18, 2021 @09:54AM (#28220941)

Applications that use jsoup to parse user-supplied HTML or XML inputs may be vulnerable to DoS attacks. Fuzz tests conducted with the JVM fuzzer "Jazzer", through OSS-Fuzz, uncovered 8 critical bugs and 11 further vulnerabilities.

[ Parent | on HN ]