{
  "@id": "urn:uuid:f12ebadb-1b42-4c50-8e13-242533c8b380",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 3,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-05T22:52:00.293579+00:00",
  "statements": [
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2015-6748 is fixed in version 1.7.2-tuxcare.1 of org.jsoup:jsoup.",
      "vulnerability": {
        "name": "CVE-2015-6748"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2021-37714 affects version 1.7.2-tuxcare.1 of org.jsoup:jsoup.",
      "vulnerability": {
        "name": "CVE-2021-37714"
      },
      "action_statement": "Vulnerability CVE-2021-37714 affects version 1.7.2-tuxcare.1 of org.jsoup:jsoup."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-36033 is fixed in version 1.7.2-tuxcare.1 of org.jsoup:jsoup.",
      "vulnerability": {
        "name": "CVE-2022-36033"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.jsoup/jsoup@1.7.2-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-05T22:52:00.293579+00:00",
      "status_notes": "Vulnerability CVE-2026-75140 does not affect version 1.7.2-tuxcare.1 of org.jsoup:jsoup. not_affected \u2014 jsoup version 1.7.2 is not affected by CVE-2026-75140. The vulnerability requires XML namespace map handling code that copies inherited namespace maps on every start element, causing quadratic memory complexity. Version 1.7.2 does not implement XML namespace (xmlns) processing at all - there are no namespace maps, no xmlns attribute handling, and no namespace-related data structures in XmlTreeB...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-75140"
      },
      "impact_statement": "not_affected \u2014 jsoup version 1.7.2 is not affected by CVE-2026-75140. The vulnerability requires XML namespace map handling code that copies inherited namespace maps on every start element, causing quadratic memory complexity. Version 1.7.2 does not implement XML namespace (xmlns) processing at all - there are no namespace maps, no xmlns attribute handling, and no namespace-related data structures in XmlTreeB..."
    }
  ]
}