-
Bug
-
Resolution: Fixed
-
Normal
-
5.10.0
-
None
-
None
Steps to Reproduce
There are vulnerabilities reported in org.bouncycastle:bcprov-jdk14
- https://vulert.com/vulnerability/maven-org.bouncycastle:bcprov-jdk14-7602
- https://security.snyk.io/package/maven/bouncycastle:bcprov-jdk14
Current Result
keikai-pdf includes it by com.lowagie:itext
Expected Result
doesn't include it by default
Debug Information
- PdfReader depends on bcprov-jdk14 to be able to read encrypted files but keikai doesn't provide this feature.