From 4dedd7613e23994ae4871638f67092e40f189911 Mon Sep 17 00:00:00 2001
From: reeshika-h <reeshika.hosmani@contentstack.com>
Date: Wed, 26 Aug 2026 14:32:11 +0530
Subject: [PATCH] fix: upgrade jsoup to 1.23.2 to address Snyk resource
 allocation vulnerability

jsoup 1.23.1 is flagged by Snyk (CVE-2026-75140) for unbounded memory
growth in XmlTreeBuilder's namespace scope tracking. Fixed upstream in
1.23.2 via a rewritten NamespaceBindings scope tracker that replaces the
per-element namespace-map copy.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 CHANGELOG.md | 6 ++++++
 pom.xml      | 4 ++--
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c641541..4c76ace 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 A brief description of what changes project contains
 
+## Aug 26, 2026
+
+#### v1.6.2
+
+- Fix: Upgraded `org.jsoup:jsoup` to 1.23.2 to address a Snyk-reported Allocation of Resources Without Limits or Throttling vulnerability (CVE-2026-75140)
+
 ## Aug 17, 2026
 
 #### v1.6.1
diff --git a/pom.xml b/pom.xml
index b745bdb..ec27095 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>utils</artifactId>
-    <version>1.6.1</version>
+    <version>1.6.2</version>
     <packaging>jar</packaging>
     <name>Contentstack-utils</name>
     <description>Java Utils SDK for Contentstack Content Delivery API, Contentstack is a headless CMS</description>
@@ -20,7 +20,7 @@
         <maven-source-plugin.version>2.2.1</maven-source-plugin.version>
         <maven-javadoc-plugin.version>3.1.1</maven-javadoc-plugin.version>
         <junit.version>4.13.2</junit.version>
-        <jsoup.version>1.23.1</jsoup.version>
+        <jsoup.version>1.23.2</jsoup.version>
         <json.simple.version>1.1.1</json.simple.version>
         <maven-site-plugin.version>3.3</maven-site-plugin.version>
         <maven-gpg-plugin.version>1.5</maven-gpg-plugin.version>