Hi Brent, thanks for the report and the pull request. Tbh. it's not completely clear to me how the class loader is leaked here as I can't find any suspicious members. Regarding the proposed fix that's fine for the helper hold at the validator factory level but I'm a bit concerned about its usage during bootstrap as I think we'd now create a new XmlInputFactory for each bootstrap invocation (not sure how costly that is).