Upgrade to xalan 2.7.1.jbossorg-4 and include fix for cve-2014-0107 ------------------------------------------------------------------- Key: WFLY-8237 URL: https://issues.jboss.org/browse/WFLY-8237 Project: WildFly Issue Type: Task Components: XML Frameworks Reporter: Scott Marlow Assignee: Scott Marlow EAP is still using 2.7.1 with our patches on top of it. It would be wise to upgrade to 2.7.2 and add any missing patches we did to 2.7.1