Package · Maven

org.verapdf:library

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2024-28109

Potential XSLT injection vulnerability when using policy files

veraPDF-library is a PDF/A validation library. Executing policy checks using custom schematron files invokes an XSL transformation that could lead to a remote code execution (RCE) vulnerability. This vulnerability is fixed in 1.24.2.

veraPDF veraPDF-library org.verapdf:verapdf-library-jakarta org.verapdf:library Maven

Mar 28, 2024