Tag

xercesimpl

Safeguard articles tagged "xercesimpl" — guides, analysis, and best practices for software supply chain and application security.

1 article

AppSec

xercesImpl: XXE Risks in Java XML Parsing and How to Configure It

The xercesImpl Maven artifact turns up transitively in thousands of Java builds. Here is its real CVE history, why XXE is your configuration's fault, and the hardening block to paste.

Jan 16, 20256 min read