Skip to content

Commit 66fbdd0

Browse files
committed
Remove pdfbox as a dependency
There's a known vulnerability on version 2.0.21 of pdfbox Dependency on pdfbox is introduced by the tess4j dependency
1 parent 3f017f5 commit 66fbdd0

3 files changed

Lines changed: 15 additions & 3 deletions

File tree

pdfocr-api/pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,4 +47,4 @@
4747
</resource>
4848
</resources>
4949
</build>
50-
</project>
50+
</project>

pdfocr-tesseract4/pom.xml

Lines changed: 13 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,18 @@
4545
<artifactId>log4j-over-slf4j</artifactId>
4646
<groupId>org.slf4j</groupId>
4747
</exclusion>
48+
<exclusion>
49+
<artifactId>pdfbox</artifactId>
50+
<groupId>org.apache.pdfbox</groupId>
51+
</exclusion>
52+
<exclusion>
53+
<artifactId>pdfbox-tools</artifactId>
54+
<groupId>org.apache.pdfbox</groupId>
55+
</exclusion>
56+
<exclusion>
57+
<artifactId>jbig2-imageio</artifactId>
58+
<groupId>org.apache.pdfbox</groupId>
59+
</exclusion>
4860
</exclusions>
4961
</dependency>
5062
<dependency>
@@ -54,4 +66,4 @@
5466
<scope>test</scope>
5567
</dependency>
5668
</dependencies>
57-
</project>
69+
</project>

pom.xml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -137,4 +137,4 @@
137137
</build>
138138
</profile>
139139
</profiles>
140-
</project>
140+
</project>

0 commit comments

Comments
 (0)