Vulnerability Database · Debian · libpdfbox-java · Version
libpdfbox-java 1:1.8.16-5
1:1.8.16-5 is affected by 4 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 0 Medium 3 Low 0 Unrated 1
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
libpdfbox-java 1:1.8.16-5 vulnerabilities
4 vulnerabilities cover libpdfbox-java 1:1.8.16-5. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| OutOfMemory Exception in Apache PDFBox - libpdfbox-java and libpdfbox2-java Vulnerability | 5.5 medium | No fix published | 12 Jun 2021 |
| Infinite Loop Vulnerability in Apache PDFBox (CVE-2021-31812) | 5.5 medium | No fix published | 12 Jun 2021 |
| Path Traversal Vulnerability in Apache PDFBox - libpdfbox-java and libpdfbox2-java | 5.3 medium | No fix published | 10 Mar 2026 |
| Critical Vulnerability in libpdfbox-java and libpdfbox2-java Packages | N/A unrated | No fix published | 14 Apr 2026 |
Looking for another version, or everything Vulert holds for libpdfbox-java?
Questions
About libpdfbox-java 1:1.8.16-5
Is libpdfbox-java 1:1.8.16-5 vulnerable?
Yes. 4 vulnerabilities in the Vulert database cover libpdfbox-java 1:1.8.16-5: 0 critical, 0 high, 3 medium and 0 low, plus 1 not yet rated. Each entry above names the fixed version to move to.
How do I monitor libpdfbox-java for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the libpdfbox-java version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.