- Package:
- src:jabref
- Source:
- src:jabref
- Submitter:
- Moritz Muehlenhoff
- Date:
- 2025-04-23 16:09:01 UTC
- Severity:
- normal
Your package depends on libpdfbox-java, which is a long EOLed version
with open security issues of what is packaged as libpdfbox2-java for
the current releases of Pdfbox.
Please port your package to use libpdfbox2-java instead.
Cheers,
Moritz
FWIW, there's an old upstream commit which might be helpful here: https://github.com/JabRef/jabref/commit/ea8ccb39c73d4f977592eadc5bd3a64c0fafdcab Cheers, gregor