org.springframework.ws:spring-xml vulnerabilities (Maven)

2 vulnerabilities.

• org.springframework.ws:spring-xml Maven Jaxp13 XPath XXE via StreamSource and SAXSource CVE-2026-40998 Fix available 8.2 HighJune 11, 2026
• org.springframework.ws:spring-xml Maven Spring Web Services XML External Entity Injection (XXE) CVE-2019-3773 Fix available 9.8 CriticalJanuary 18, 2019