diff --git a/pom.xml b/pom.xml
index 61673926d..57d4ea83d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -156,7 +156,7 @@ limitations under the License.
     <spark.version>2.2.0</spark.version>
     <sqlline.version>1.8.0</sqlline.version>
     <tpcds.version>1.2</tpcds.version>
-    <xalan.version>2.7.1</xalan.version>
+    <xalan.version>2.7.3</xalan.version>
     <xerces.version>2.9.1</xerces.version>
 
     <!-- Other properties (not version numbers) -->