diff --git a/doc/licenses/apache-santuario-4.0.2/NOTICE b/doc/licenses/apache-santuario-2.2.6/NOTICE
similarity index 100%
rename from doc/licenses/apache-santuario-4.0.2/NOTICE
rename to doc/licenses/apache-santuario-2.2.6/NOTICE
diff --git a/doc/licenses/apache-santuario-4.0.2/README b/doc/licenses/apache-santuario-2.2.6/README
similarity index 91%
rename from doc/licenses/apache-santuario-4.0.2/README
rename to doc/licenses/apache-santuario-2.2.6/README
index a5aa412db..8ccae438d 100644
--- a/doc/licenses/apache-santuario-4.0.2/README
+++ b/doc/licenses/apache-santuario-2.2.6/README
@@ -1,7 +1,7 @@
 Apache Santuario (https://santuario.apache.org/)
 -------------------------------------------------
 
-    Version: 4.0.2
+    Version: 2.2.6
     From: 'Apache Software Foundation' (https://www.apache.org/)
     License(s):
         Apache v2.0
diff --git a/doc/licenses/apache-santuario-2.2.6/dep-coordinates.txt b/doc/licenses/apache-santuario-2.2.6/dep-coordinates.txt
new file mode 100644
index 000000000..0a6929d5b
--- /dev/null
+++ b/doc/licenses/apache-santuario-2.2.6/dep-coordinates.txt
@@ -0,0 +1 @@
+org.apache.santuario:xmlsec:jar:2.2.6
diff --git a/doc/licenses/apache-santuario-4.0.2/dep-coordinates.txt b/doc/licenses/apache-santuario-4.0.2/dep-coordinates.txt
deleted file mode 100644
index 26dd9249b..000000000
--- a/doc/licenses/apache-santuario-4.0.2/dep-coordinates.txt
+++ /dev/null
@@ -1 +0,0 @@
-org.apache.santuario:xmlsec:jar:4.0.2
\ No newline at end of file
diff --git a/doc/licenses/woodstox-core-6.6.0/README b/doc/licenses/woodstox-core-5.4.0/README
similarity index 91%
rename from doc/licenses/woodstox-core-6.6.0/README
rename to doc/licenses/woodstox-core-5.4.0/README
index 136c40ddd..ad07e9829 100644
--- a/doc/licenses/woodstox-core-6.6.0/README
+++ b/doc/licenses/woodstox-core-5.4.0/README
@@ -1,7 +1,7 @@
 Woodstox Core (https://github.com/FasterXML/woodstox)
 ------------------------------------------------------
 
-    Version: 6.6.0
+    Version: 5.4.0
     From: 'FasterXML, LLC' (http://fasterxml.com/)
     License(s):
         Apache v2.0
diff --git a/doc/licenses/woodstox-core-5.4.0/dep-coordinates.txt b/doc/licenses/woodstox-core-5.4.0/dep-coordinates.txt
new file mode 100644
index 000000000..e879f958a
--- /dev/null
+++ b/doc/licenses/woodstox-core-5.4.0/dep-coordinates.txt
@@ -0,0 +1 @@
+com.fasterxml.woodstox:woodstox-core:jar:5.4.0
diff --git a/doc/licenses/woodstox-core-6.6.0/dep-coordinates.txt b/doc/licenses/woodstox-core-6.6.0/dep-coordinates.txt
deleted file mode 100644
index ee286a084..000000000
--- a/doc/licenses/woodstox-core-6.6.0/dep-coordinates.txt
+++ /dev/null
@@ -1 +0,0 @@
-com.fasterxml.woodstox:woodstox-core:jar:6.6.0
diff --git a/doc/licenses/woodstox-stax2-api-4.2.2/dep-coordinates.txt b/doc/licenses/woodstox-stax2-api-4.2.2/dep-coordinates.txt
deleted file mode 100644
index 824c5a941..000000000
--- a/doc/licenses/woodstox-stax2-api-4.2.2/dep-coordinates.txt
+++ /dev/null
@@ -1 +0,0 @@
-org.codehaus.woodstox:stax2-api:jar:4.2.2
diff --git a/doc/licenses/woodstox-stax2-api-4.2.2/LICENSE b/doc/licenses/woodstox-stax2-api-4.2/LICENSE
similarity index 100%
rename from doc/licenses/woodstox-stax2-api-4.2.2/LICENSE
rename to doc/licenses/woodstox-stax2-api-4.2/LICENSE
diff --git a/doc/licenses/woodstox-stax2-api-4.2.2/README b/doc/licenses/woodstox-stax2-api-4.2/README
similarity index 75%
rename from doc/licenses/woodstox-stax2-api-4.2.2/README
rename to doc/licenses/woodstox-stax2-api-4.2/README
index dbd1b8e70..b2936e350 100644
--- a/doc/licenses/woodstox-stax2-api-4.2.2/README
+++ b/doc/licenses/woodstox-stax2-api-4.2/README
@@ -4,4 +4,4 @@ Woodstox Stax2-API (https://github.com/FasterXML/stax2-api)
     Version: 4.2
     From: 'FasterXML, LLC' (http://fasterxml.com/)
     License(s):
-        BSD Simplified (bundled/woodstox-stax2-api-4.2.2/LICENSE)
+        BSD Simplified (bundled/woodstox-stax2-api-4.2/LICENSE)
diff --git a/doc/licenses/woodstox-stax2-api-4.2/dep-coordinates.txt b/doc/licenses/woodstox-stax2-api-4.2/dep-coordinates.txt
new file mode 100644
index 000000000..c7bbc763f
--- /dev/null
+++ b/doc/licenses/woodstox-stax2-api-4.2/dep-coordinates.txt
@@ -0,0 +1 @@
+org.codehaus.woodstox:stax2-api:jar:4.2
diff --git a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-saml/pom.xml b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-saml/pom.xml
index 28b975aee..6622cc179 100644
--- a/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-saml/pom.xml
+++ b/extensions/guacamole-auth-sso/modules/guacamole-auth-sso-saml/pom.xml
@@ -122,14 +122,14 @@
         <dependency>
             <groupId>com.fasterxml.woodstox</groupId>
             <artifactId>woodstox-core</artifactId>
-            <version>6.6.0</version>
+            <version>5.4.0</version>
         </dependency>
 
         <!-- Apache XML Security for Java (see exclusions for java-saml) -->
         <dependency>
             <groupId>org.apache.santuario</groupId>
             <artifactId>xmlsec</artifactId>
-            <version>4.0.2</version>
+            <version>2.2.6</version>
             <exclusions>
 
                 <!--
@@ -143,6 +143,11 @@
                     <artifactId>commons-codec</artifactId>
                 </exclusion>
 
+                <exclusion>
+                    <groupId>com.fasterxml.woodstox</groupId>
+                    <artifactId>woodstox-core</artifactId>
+                </exclusion>
+
             </exclusions>
         </dependency>