[NIFI-9210] Upgrade jsoup to 1.14.2

• Type: Improvement
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 1.14.0, 1.15.0
• Fix Version/s: 1.15.0
• Component/s: Extensions
• Labels: dependency-upgrade security
• Assignee: David Handermann
• Reporter: David Handermann
• Created: 09/Sep/21 21:04
• Updated: 11/Sep/21 16:45
• Resolved: 11/Sep/21 16:45

Description

The following NiFi modules have a dependency on jsoup for HTML parsing:

• nifi-html-processors
• nifi-media-processors

Versions of jsoup prior to 1.14.2 have an associated vulnerability CVE-2021-37714. Upgrading to the latest version of jsoup addresses this potential vulnerability as well as a number of minor bugs.

Issue Links

• links to: GitHub Pull Request #5379