security vulnerability in bouncycastle:bcprov-jdk14

Steps to Reproduce

There are vulnerabilities reported in org.bouncycastle:bcprov-jdk14

• https://vulert.com/vulnerability/maven-org.bouncycastle:bcprov-jdk14-7602
• https://security.snyk.io/package/maven/bouncycastle:bcprov-jdk14

Current Result

keikai-pdf includes it by com.lowagie:itext

Expected Result

doesn't include it by default

Debug Information

• PdfReader depends on bcprov-jdk14 to be able to read encrypted files but keikai doesn't provide this feature.

Workaround