Package · Maven

com.itextpdf:itextpdf

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2021-43113

Command injection in itext7-core

iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in GhostscriptHelper.java.

com.itextpdf:itext7-core libitext5-java libitext5-java com.itextpdf:itextpdf Debian Ubuntu Maven

Dec 15, 2021