https://github.com/jboss/xerces/compare/jboss-2.12.0.SP3...cd3e765c953ab4d9c97d4ae6f990e2d7718ff901
https://github.com/jboss/xerces/commit/f539fbe0ca377cd4561c5611c68ad435090c4ef9 resolves CVE-2022-23437.