Hey Olaf, Could you please send details to priv...@xerces.apache.org.
Cheers, Gareth > On 24 Jul 2017, at 11:43, Kummer, Olaf <olaf.kum...@coremedia.com> wrote: > > Dear all, > > is there a procedure for reporting security-related bugs in Xerces-J? I > suspect that bugs reported through Jira are directly visible to everyone, so > that this approach might not be suitable for security issues. > > Thanks for helping! > Olaf