Apache Xalan used by OpenAM docker image

[patrickmcgovern1]

Hello, we are using the OpenAM docker image (version 15.2.0) and our security scans are flagging the version of Apache Xalan (2.7.2) used by the image as described in CVE-2022-34169. Is there a plan to update the version of Apache Xalan used by OpenAM?

Thanks in advance!

[vharseko]

[#896] CVE-2022-34169 Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheets