Package · Debian

libitext5-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

Unscored —

CVE-2021-37819

PDF Labs pdftk-java v3.2.3 was discovered to contain an infinite loop via the component /text/pdf/PdfReader.java.

libitext5-java libitext-java libitext5-java pdftk-java Debian Ubuntu

Sep 9, 2022
Critical 9.8

CVE-2021-43113

Command injection in itext7-core

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

com.itextpdf:itext7-core libitext5-java libitext5-java com.itextpdf:itextpdf Debian Ubuntu Maven

Dec 15, 2021