...
The StAX-based (streaming) functionality is only available as of the 2.0.0 release. Please see the Streaming XML Security page for more information about how to use this approach.
News
August 2019
Version 2.1.4 of the Apache XML Security for Java library has been released.
This release contains a fix for a security advisory - CVE-2019-12400: Apache Santuario potentially loads XML parsing code from an untrusted source. Please see the security advisories page for more information.
Please see the release notes for more information.
March 2019
Version 2.1.3 of the Apache XML Security for Java library has been released.
...
