dev-java/
xml-commons-external

Externally-defined set of standard interfaces, namely DOM, SAX, and JAXP

https://xerces.apache.org/xml-commons/components/external/

There are no open security bugs.

You think something is missing here?
Start with filling a new security bug.

Please file new vulnerability reports on Gentoo Bugzilla and assign them to the Gentoo Security product and Vulnerabilities component.