The Apache Xalan Java XSLT library 2.7.2 is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. Work was done in [https://github.com/OpenLiberty/open-liberty/pull/22150] to exclude the packages from shipping. Since version 2.7.3 was released with a fix, we are updating the dependencies to use the newer version 2.7.3.
An Open-Liberty Issue 28798 to investigate and re-enable the failing test - testBothjdkSourceLevelAndjavaSourceLevel due to a problem related to Java security Privileged Action exception.
The Apache Xalan Java XSLT library 2.7.2 is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. Work was done in [https://github.com/OpenLiberty/open-liberty/pull/22150] to exclude the packages from shipping. Since version 2.7.3 was released with a fix, we are updating the dependencies to use the newer version 2.7.3.