[FOP-3053] Security Vulnerability with Xerces version <= 2.12.1

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7
• Fix Version/s: 2.8
• Assignee: Simon Steiner
• Reporter: Hugo L R Prioli
• Created: 11/Feb/22 17:23
• Updated: 14/Feb/22 09:45
• Resolved: 14/Feb/22 09:45

Description

FOP needs to reference Xerces 2.12.2, which fixes vulnerability:

https://nvd.nist.gov/vuln/detail/CVE-2022-23437 

FOP 2.7 is still using vulneable Xerces 2.12.1.