danfickle / openhtmltopdf

An HTML to PDF library for the JVM. Based on Flying Saucer and Apache PDF-BOX 2. With SVG image support. Now also with accessible PDF support (WCAG, Section 508, PDF/UA)!

https://danfickle.github.io/pdf-templates/index.html

CVE-2021-27807 and CVE-2021-27906

Samuel3 opened this issue 3 years ago · comments

Samuel commented 3 years ago

https://seclists.org/oss-sec/2021/q1/247
https://seclists.org/oss-sec/2021/q1/248

Can you please update Apache PDF Box Version to 2.0.23?

danfickle commented 3 years ago

1.0.8 with PDFBOX 2.0.23 was just released. Thanks for reporting!