[BATIK-1321] Security Vulnerability with Xerces version <= 2.12.1

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.14
• Fix Version/s: 1.15
• Assignee: Simon Steiner
• Reporter: Stacey McIntire
• Created: 21/Feb/22 15:45
• Updated: 22/Feb/22 13:18
• Resolved: 22/Feb/22 13:18

Description

Batik needs to reference Xerces 2.12.2, which fixes vulnerability:

https://nvd.nist.gov/vuln/detail/CVE-2022-23437 

Batik 1.14 is still using vulnerable Xerces 2.12.1.