Hi folks, I'm trying to remediate the flaw in xalan-2.7.2 by bumping to the latest release. However, I'm having trouble do so. For example, https://mvnrepository.com/artifact/xalan/xalan has 2.7.2 but not 2.7.3 - I'm not able to pull it remotely. Was this release published to a public Maven repository?
I tried including xalan-2.7.3.jar directly in my project, but there seems to be a problem with transitive dependencies that prevents it from being recognized. Any recommendations? Thanks, Jon Public
