diff --git a/build/tmpl/text/changes.txt b/build/tmpl/text/changes.txt
index 315f53aa0b..9d3271b833 100644
--- a/build/tmpl/text/changes.txt
+++ b/build/tmpl/text/changes.txt
@@ -7,9 +7,12 @@ Changes log
     - Bugs fixed
        - Fixed NPE in JAX-RS backend when request's entity has no media type. Issue #1271.
          Reported by Thomas Mortagne.
+       - XEE injection security fix in Jax-rs extension. Issue #1286.
+         Reported by Man Yue Mo.
     - Enhancements
        - Added support of Header Origin and Origin dimension. Issue #1275.
          Reported and contributed by adolski.
+
 - 2.3.10 (05/28/2017)
     - Bugs fixed
        - Invalid max-age value for cookie settings replaced by Integer.MAX_VALUE constant. Issue #1251.
diff --git a/libraries/org.simpleframework.xml_2.7/library.xml b/libraries/org.simpleframework.xml_2.7/library.xml
index 1178b178af..a2c74d0233 100644
--- a/libraries/org.simpleframework.xml_2.7/library.xml
+++ b/libraries/org.simpleframework.xml_2.7/library.xml
@@ -9,9 +9,9 @@
 
 	<package name="org.simpleframework.xml">
 		<maven>
-			<groupId>org.simpleframework</groupId>
-			<artifactId>simple-xml</artifactId>
-			<version>2.7.1</version>
+			<groupId>org.restlet.lib</groupId>
+			<artifactId>org.simpleframework.simple-xml</artifactId>
+			<version>2.7.2</version>
 		</maven>
 	</package>
 	<distributions>
diff --git a/libraries/org.simpleframework.xml_2.7/org.simpleframework.xml.jar b/libraries/org.simpleframework.xml_2.7/org.simpleframework.xml.jar
index 913725de7d..c13ea46dd8 100644
Binary files a/libraries/org.simpleframework.xml_2.7/org.simpleframework.xml.jar and b/libraries/org.simpleframework.xml_2.7/org.simpleframework.xml.jar differ