{"api_version":"v1","generated_at":"2026-10-07T14:55:00+00:00","product":{"cve_count":1,"evidence_gap_note":"This identity is present in BlackTree CVE records, but no product-specific publisher support or retirement history is currently registered in Lifecycle.","id":"security:cve-apache-software-foundation-apache-xalan-j-5a915ec835c0","lifecycle_state":"evidence_gap","linked_lifecycle_url":null,"name":"Apache Xalan-J","next_cursor":null,"observations":[{"affected":"Xalan-J \u2264 2.7.2","affected_versions_present":true,"cve_id":"CVE-2022-34169","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-34169","fixed":"For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 All running instances of OpenJDK Java must be restarted for this update to take effect.","last_modified":"2026-05-27T12:51:15.955Z","patch_url":"https://access.redhat.com/security/cve/CVE-2022-34169","primary_source":"","published":"2022-07-19T00:00:00.000Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"Apache Software Foundation"}}