{"action":"Upgrade xerces:xercesImpl to 2.12.0.sp3 or later.","affected":[{"fixed":"2.12.0.sp3","introduced":"0"}],"component":"xerces:xercesImpl","cve_ids":["CVE-2020-14338"],"ecosystem":"Maven","epss":0.01292,"exploited":false,"fixed_versions":["2.12.0.sp3"],"ghsa_id":"GHSA-w4jq-qh47-hvjq","id":"tcs_01M5N9FGPGX25BFSVR4SY55RSS","modified_at":"2026-09-10T03:49:12.846936180Z","published_at":"2022-02-15T01:37:41Z","references":["https://osv.dev/vulnerability/GHSA-w4jq-qh47-hvjq","https://nvd.nist.gov/vuln/detail/CVE-2020-14338","https://bugzilla.redhat.com/show_bug.cgi?id=1860054","https://lists.apache.org/thread.html/rf96c5afb26b596b4b97883aa90b6c0b0fc4c26aaeea7123c21912103@%3Cj-users.xerces.apache.org%3E"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-w4jq-qh47-hvjq","url":"https://osv.dev/vulnerability/GHSA-w4jq-qh47-hvjq"}],"summary":"Improper Input Validation in Xerces"}