Upgrade CXF to 4.0.4:
CXF Release notes : https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310511&version=12353622

Tag: https://github.com/apache/cxf/releases/tag/cxf-4.0.4
Hash: 40ad2263e5c080bf3b55542bf3ee052fa7465733
Diff: https://github.com/apache/cxf/compare/cxf-4.0.0...cxf-4.0.4

This includes these CXF dependency upgrade:

The neethi 3.2.0:
neethi release notes : https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311260&version=12350147
Tag: https://github.com/apache/ws-neethi/releases/tag/neethi-3.2.0
Hash: 0c0b0ffb670f0586d056c3d634e51dcdddff26f5
Diff: https://github.com/apache/ws-neethi/compare/neethi-3.1.1...neethi-3.2.0

WSS4j 3.0.3:
Release notes: https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12310063&version=12353796
Tag: https://github.com/apache/ws-wss4j/releases/tag/wss4j-3.0.3
Hash: b45612a9a7f09d5bb843747173b0f8c89d5e65c4
Diff: https://github.com/apache/ws-wss4j/compare/wss4j-3.0.0...wss4j-3.0.3

Apache Santuario 3.0.4:
Tag: https://github.com/apache/santuario-xml-security-java/releases/tag/xmlsec-3.0.4
Hash: 070a98eeb3f7ba5eb8de6f5169b7cb299797a55e
Diff: https://github.com/apache/santuario-xml-security-java/compare/xmlsec-3.0.3...xmlsec-3.0.4

jbossws-cxf: 7.1.0.Final
Tag: https://github.com/jbossws/jbossws-cxf/releases/tag/jbossws-cxf-7.1.0.Final
Hash: afa2ef462fcd9a25548fdb2ace7dd03ee0c57df5
Diff: https://github.com/jbossws/jbossws-cxf/compare/jbossws-cxf-7.0.0.Final...jbossws-cxf-7.1.0.Final