We use an old version of CXF with various security issues and moreover we ship all the distribution instead of the needed artifacts.
We should upgrade to the latest version (3.1.2).