{"action":"Upgrade xalan:xalan to 2.7.3 or later.","affected":[{"fixed":"2.7.3","introduced":"0"}],"component":"xalan:xalan","cve_ids":["CVE-2022-34169"],"ecosystem":"Maven","epss":0.81759,"exploited":false,"fixed_versions":["2.7.3"],"ghsa_id":"GHSA-9339-86wc-4qgf","id":"tcs_01M5N8NWXEHJ4T0W6XJFGCC63F","modified_at":"2026-05-08T07:56:11.683745630Z","published_at":"2022-07-20T00:00:18Z","references":["https://osv.dev/vulnerability/GHSA-9339-86wc-4qgf","https://nvd.nist.gov/vuln/detail/CVE-2022-34169","https://xalan.apache.org","https://www.oracle.com/security-alerts/cpujul2022.html","https://www.debian.org/security/2022/dsa-5256","https://www.debian.org/security/2022/dsa-5192","https://www.debian.org/security/2022/dsa-5188","https://security.netapp.com/advisory/ntap-20240621-0006","https://security.netapp.com/advisory/ntap-20220729-0009","https://security.gentoo.org/glsa/202401-25","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YULPNO3PAWMEQQZV2C54I3H3ZOXFZUTB","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L3XPOTPPBZIPFBZHQE5E7OW6PDACUMCJ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KO3DXNKZ4EU3UZBT6AAR4XRKCD73KLMO","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JN3EVGR7FD3ZLV5SBTJXUIDCMSK4QUE2","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I5OZNAZJ4YHLOKRRRZSWRT5OJ25E4XLM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H4YNJSJ64NPCNKFPNBYITNZU5H3L4D6L","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YULPNO3PAWMEQQZV2C54I3H3ZOXFZUTB","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3XPOTPPBZIPFBZHQE5E7OW6PDACUMCJ","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KO3DXNKZ4EU3UZBT6AAR4XRKCD73KLMO","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3EVGR7FD3ZLV5SBTJXUIDCMSK4QUE2","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I5OZNAZJ4YHLOKRRRZSWRT5OJ25E4XLM","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H4YNJSJ64NPCNKFPNBYITNZU5H3L4D6L","https://lists.debian.org/debian-lts-announce/2022/10/msg00024.html","https://lists.apache.org/thread/x3f7xv3p1g32qj2hlg8wd57pwcpld471","https://lists.apache.org/thread/2qvl7r43wb4t8p9dd9om1bnkssk07sn8","https://lists.apache.org/thread/12pxy4phsry6c34x2ol4fft6xlho4kyw","https://gitbox.apache.org/repos/asf?p=xalan-java.git;a=commit;h=da3e0d06b467247643ce04e88d3346739d119f21","https://gitbox.apache.org/repos/asf?p=xalan-java.git;a=commit;h=ab57211e5d2e97cbed06786f919fa9b749c83573","https://gitbox.apache.org/repos/asf?p=xalan-java.git;a=commit;h=2e60d0a9a5b822c4abf9051857973b1c6babfe81","https://gitbox.apache.org/repos/asf?p=xalan-java.git","http://packetstormsecurity.com/files/168186/Xalan-J-XSLTC-Integer-Truncation.html","http://www.openwall.com/lists/oss-security/2022/07/19/5","http://www.openwall.com/lists/oss-security/2022/07/19/6","http://www.openwall.com/lists/oss-security/2022/07/20/2","http://www.openwall.com/lists/oss-security/2022/07/20/3","http://www.openwall.com/lists/oss-security/2022/10/18/2","http://www.openwall.com/lists/oss-security/2022/11/04/8","http://www.openwall.com/lists/oss-security/2022/11/07/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9339-86wc-4qgf","url":"https://osv.dev/vulnerability/GHSA-9339-86wc-4qgf"}],"summary":"Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets"}