Merge pull request #312 from contentstack/fix/jsoup-xss

fix: pin jsoup to 1.23.1 to resolve XSS vulnerability

Author: reeshika-h

CHANGELOG.md

@@ -1,5 +1,10 @@
 # CHANGELOG
 
+## v2.8.1
+
+### Aug 17, 2026
+- Snyk fixes
+
 ## v2.8.0
 
 ### Jul 20, 2026

pom.xml

@@ -5,7 +5,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>com.contentstack.sdk</groupId>
     <artifactId>java</artifactId>
-    <version>2.8.0</version>
+    <version>2.8.1</version>
     <packaging>jar</packaging>
     <name>contentstack-java</name>
     <description>Java SDK for Contentstack Content Delivery API</description>
@@ -220,6 +220,12 @@
                 <artifactId>commons-lang3</artifactId>
                 <version>3.18.0</version>
             </dependency>
+            <!-- Fix Cross-site Scripting (XSS) in jsoup pulled by contentstack-utils transitive deps -->
+            <dependency>
+                <groupId>org.jsoup</groupId>
+                <artifactId>jsoup</artifactId>
+                <version>1.23.1</version>
+            </dependency>
             <!-- Fix Spring vulnerabilities from contentstack-utils transitive deps -->
             <dependency>
                 <groupId>org.springframework</groupId>