xalan:xalan (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package xalan:xalan, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2014-0107 — CVSS 7.5 (high): The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when…
• CVE-2022-34169 — CVSS 7.5 (high): The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be…