veraPDF v1.30.1

Version 1.30 (April 21, 2026)

Applications

• ended PDFBox support
• added new option to install CLI only without GUI (commit)
• removed sources of validation profiles and the model from the installer (commit)
• veraPDF Rest API: changed license to MIT (commit) and updated dropwizard version to 3.0.16 (commit)
• consistent use of PDF/A part and conformance level capitalization (commit)

Validation

• (PDF/A-2,3,4, PDF/UA-1,2, WTPDF-1) fixed misprint in three names of predefined CMaps (commit)
• (PDF/A-2,3,4, PDF/UA-1,2, WTPDF-1) relaxed the requirement for the presence of the (3,1) cmap in non-symbolic TrueType fonts in case of a font used solely in rendering mode and no embedded font program (commits 1 2)
• (PDF/A-4, PDF/UA-2) added validation of pdfaid:rev and pdfuaid:rev (commit)
• (PDF/UA-2, WTPDF-1) permit math to be not necessarily an immediate child of Formula structure element (commit)
• (PDF/UA-2, WTPDF-1) limited PDF/UA-2 8.10.1 and 8.10.2 clauses to Widget annotations used as appearance of interactive form fields (commit)
• (PDF/A) fixed issue with Default ColorSpace not taken into account for the alternate CS of a DeviceN CS of an Image XObject (commits 1 2)
• (PDF/A-1) fixed matching date validation in case of any of the dates missing in the XMP metadata (commit)
• (PDF/UA-1,2, WTPDF-1) permitted top left cells with no Scope in Table structure element (commit)

PDF Parser

• fixed Unicode calculation for Type0 fonts (commit)
• supported the RunLengthDecode filter (commit)
• supported the Crypt filter without decode parameters (commit)
• fixed Runtime exceptions in cases of invalid data structures
• improved logs (commits 1 2 3 4)
• fixed processing of CID = 0 for symbolic fonts (commits 1 2)

Core library

• added support for Java 25
• added automatic module names to the MANIFEST files
• fixed thread safety issues (commit)
• changed Java interface parser.getFlavours() to return empty list instead of a default flavour in case of missing conformance declarations (commit)

Policy Checker

• fixed URI support in XSLT engine (commit)

Metadata fixer

• (PDF/A-4, PDF/UA-2) fixed rev value (commit)

Security

• included the fix for GHSA-72hv-8253-57q (commit)

veraPDF Arlington

• implements Arlington model as of the release date (latest commit).
• upgraded veraPDF parser to version 1.30.1 RC (see release notes)
• fixed getting PDF version via Version entry in the Catalog (commit)
• added auto-detect for ISO_19005_3 and WTPDF extensions (commits 1 2)
• fixed issues in processing merged annotations and fields (commits 1 2 3)
• fixed exception (commit)
• improved wording of messages (commit)
• added warning for invalid language escape sequences in text strings (commit)

New Contributors

• @shem-sergey made their first contribution in #621
• @DmitryRumiantsev made their first contribution in #658
• @ka7 made their first contribution in #682
• @rillig made their first contribution in #687
• @bryant1410 made their first contribution in #727
• @david-russo made their first contribution in #743
• @RezviyBelorus made their first contribution in #944
• @angrykid12 made their first contribution in #1020
• @roman-semizhon made their first contribution in #1060
• @jmvezic made their first contribution in #1058
• @dependabot[bot] made their first contribution in #1114
• @AnhelinaM made their first contribution in #1226
• @ProxyNexus made their first contribution in #1403
• @SalomScala made their first contribution in #1409
• @Samyssmile made their first contribution in #1440
• @nikitakovaliov92 made their first contribution in #1471

Full Changelog: v1.28.2...v1.30.1

veraPDF v1.30.0-RC1 Release Candidate

Version 1.30 RC (February 10, 2026)

Applications

• ended PDFBox support
• added new option to install CLI only without GUI (commit)
• removed sources of validation profiles and the model from the installer (commit)
• veraPDF Rest API: changed license to MIT (commit) and updated dropwizard version to 3.0.16 (commit)

Validation

• (PDF/A-2,3,4, PDF/UA-1,2, WTPDF-1) fixed misprint in three names of predefined CMaps (commit)
• (PDF/A-2,3,4, PDF/UA-1,2, WTPDF-1) relaxed the requirement for the presence of the (3,1) cmap in non-symbolic TrueType fonts in case of a font used solely in rendering mode and no embedded font program (commits 1 2)
• (PDF/A-4, PDF/UA-2) added validation of pdfaid:rev and pdfuaid:rev (commit)
• (PDF/UA-2, WTPDF-1) permit math to be not necessarily an immediate child of Formula structure element (commit)
• (PDF/UA-2, WTPDF-1) limited PDF/UA-2 8.10.1 and 8.10.2 clauses to Widget annotations used as appearance of interactive form fields (commit)
• (PDF/A) fixed issue with Default ColorSpace not taken into account for the alternate CS of a DeviceN CS of an Image XObject (commits 1 2)
• (PDF/A-1) fixed matching date validation in case of any of the dates missing in the XMP metadata (commit)

PDF Parser

• fixed Unicode calculation for Type0 fonts (commit)
• supported the RunLengthDecode filter (commit)
• supported the Crypt filter without decode parameters (commit)
• fixed Runtime exceptions in cases of invalid data structures
• improved logs (commits 1 2 3 4)

Core library

• added support for Java 25
• added automatic module names to the MANIFEST files
• fixed thread safety issues (commit)
• changed Java interface parser.getFlavours() to return empty list instead of a default flavour in case of missing conformance declarations (commit)

Policy Checker

• fixed URI support in XSLT engine (commit)

veraPDF Arlington

• implements Arlington model as of the release date (latest commit).
• upgraded veraPDF parser to version 1.30.1 RC (see release notes)
• fixed getting PDF version via Version entry in the Catalog (commit)
• added auto-detect for ISO_19005_3 and WTPDF extensions (commits 1 2)
• fixed issues in processing merged annotations and fields (commits 1 2 3)
• fixed exception (commit)
• improved wording of messages (commit)
• added warning for invalid language escape sequences in text strings (commit)

New Contributors

• @shem-sergey made their first contribution in #621
• @DmitryRumiantsev made their first contribution in #658
• @ka7 made their first contribution in #682
• @rillig made their first contribution in #687
• @bryant1410 made their first contribution in #727
• @david-russo made their first contribution in #743
• @RezviyBelorus made their first contribution in #944
• @angrykid12 made their first contribution in #1020
• @roman-semizhon made their first contribution in #1060
• @jmvezic made their first contribution in #1058
• @dependabot[bot] made their first contribution in #1114
• @AnhelinaM made their first contribution in #1226
• @ProxyNexus made their first contribution in #1403
• @SalomScala made their first contribution in #1409
• @Samyssmile made their first contribution in #1440
• @nikitakovaliov92 made their first contribution in #1471

Full Changelog: https://github.com/veraPDF/veraPDF-library/commits/v1.30.0-RC1

veraPDF v1.28.2

Version 1.28.2 (July 15, 2025)

Applications

• updated vulnerable dependencies (commit)

Validation

• (PDF/UA-2, WTPDF-1) disabled rule about multiple link annotations that target the same location (commit)
• (PDF/UA-2, WTPDF-1) fixed structure destination validation (commit)
• fixed validation of Unicode for several flavours (commit)

PDF Parser

• fixed width calculation in an edge case of Type2CharString (commit)
• fixed COSPredictorDecode (commits 1 2)
• fixed RDF parsing with no attributes in metadata (commit)
• fixed exceptions in case of malformed PDFs

Maintenance

• moved Maven publication from the decommissioned Sonatype service to Maven central publication
• added the new maven-central-publication plugin to veraPDF-parent POM for publication for all projects (commit)
• updated the Maven plugins used to the latest versions (commit)

Full Changelog: v1.28.1...v1.28.2

veraPDF v1.28.1

Version 1.28 (April 30, 2025)

Applications

• updated izpack to version 5.2.4

Validation

• (PDF/UA-1,2, WTPDF-1, ISO 32005) added rules to require Marked=true entry in MarkInfo dictionary
• (PDF/UA-2, WTPDF-1, ISO 32005) fixed parent-child rules for NonStruct, Part and Div
• (PDF/UA-2, WTPDF-1, ISO 32005) fixed exception during table validation in cases of invalid table structure
• (PDF/UA-2, WTPDF-1) fixed mismatch of structure destinations in Link annotations
• (PDF/UA-2, WTPDF-1) fixed rule about alternative text for signature graphic content with no text
• (PDF/UA-2, WTPDF-1) fixed checking ToggleNoView flag for annotations

PDF Parser

• fixed xref parsing in some exceptional cases and improved error reporting
• fixed parsing of indirect Kids in number tree
• fixed invalid byte range parsing in CMap stream

v1.28.0-RC1

Applications

• added validation for several flavours
• created docker image for veraPDF CLI
• added showing location of config

Validation

• (WTPDF-1) added support for WTPDF Reuse and Accessibility conformance levels
• (PDF/A, PDF/UA) fixes the issue of accepting sometimes string value type if the PDF specification requires name object type
• (PDF/A) fixed validation of Interpolate entry in image mask dictionaries
• (PDF/A-1) updated the rule on compressed XMP Metadata
• (PDF/UA-1) added rule about PDF version
• (PDF/UA-1) fixed recursive propagation of Artifact to untagged Form XObjects
• (PDF/UA-1,2) fixed handing of circular role mappings and namespaces
• (PDF/UA-1,2) permit untagged tilling patterns
• (PDF/UA-2) permit math structure type only within Formula
• (PDF/UA-2) added rule to require Metadata entry in Catalog
• (ISO 32005) updated Div, Part, NonStruct processing to inherit containment rules from the parent
• (ISO 32005) added containment rules for Ruby and Warichu
• (ISO 32005) permitted Sub as a child of Code
• (ISO 32005) fixed rule on content items in StructTreeRoot

PDF Parser

• fixed parsing of empty UTF-16 string
• fixed parsing of CFF fonts with empty Name Index
• updated width calculation for CFFType1 font program with duplicated glyph names
• fixed name calculation for glyph with code 0
• fixed signature EOF logic in incremental updates
• fixed parsing of compressed CIDToGIDMap stream

Core library

• improved performance
• improved logs
• more robust exception handling

Corpus

• updated PDF/A-4 and PDF/UA-2 test corpus
• added WTPDF declarations to PDF/UA-2 test files

Documentation

• improved java docs
• improved policy documentation

veraPDF v1.26.2

Version 1.26.2 (December 4, 2024)

Applications

• fixed CVE-2024-52800

veraPDF v1.26.1

Version 1.26 (May 16, 2024)

Validation

• (PDF/UA-2) added support for PDF/UA-2 (draft)
• (PDF/UA-1) detect and report structure elements with missing parent
• (PDF/UA-1) fixed checks related to role maps between standard and non-standard tags
• (PDF/UA-1) fixed rules related to annotations in structure tree
• (PDF/UA-1) added checks for XMP prefixes in the identification metadata
• (PDF/A-1,2,3,4) added check for valid values of BitsPerComponent
• (PDF/A-2,3,4) apply the rule on identical tint transform also to /All and /None
• (PDF/A-1) added check that the document does not use xref stream
• (PDF/A-1) Fix syncing XMP with Info dictionary in case of multiple creators
• (PDF/UA-2) supported named structured destinations in goto actions
• (PDF/UA-1) fixed rules about annotations
• (PDF/UA-2) include ISO 32005 rules to PDF/UA-2 profile
• (PDF/UA-2) added rule about Ref entry of Note structure element
• (PDF/UA-2) supported validation of Open Action destination
• (PDF/UA-2) disabled ActualText and Alt validation for non-real content
• (PDF/UA-2) fixed checking of role mapping structure types to the same namespace

Applications

• set secure parameter for xslt transformation (CVE-2024-28109)
• improved multithreading performance of JavaScript evaluation
• Improved REST API: more logical endpoints, documentation, web demo page, automatic deployment of the docker image to DockerHub.com
• Redesigned main GUI window
• Improved CLI output (help, debug logs, text report, JSON report formatting)
• Improved XML report schema in case of exceptions
• Fixed GUI check for the availability of a newer version

Core library

• added support for Java 21

PDF Model

• Cleanup of the unused properties and links

PDF Parser

• fixed MathML parsing exception
• added warning for duplicated MCID in content stream
• fixed CIDFontType2 font program parsing for OpenType fonts
• fixed ROS operator finding for CFF fonts
• Updated predefined CMaps
• Added support for structure attributes defined via ClassMap
• Fixed parsing of inline images of undefined length
• Detect and generate a warning when dictionary contains duplicated keys
• Detect and generate a warning when the embedded font has duplicated glyph names
• Detect and generate a warning in case of loops in document structure tree
• Fixed decryption of string objects
• Fix default whitepoint for CIELab in JPEG2000
• Optimized use of temporary files

v1.26.0-RC2

What's Changed

Applications

• set secure parameter for xslt transformation (CVE-2024-28109)
• improved multithreading performance of JavaScript evaluation

Core library

• added support for Java 21

PDF Parser

• fixed MathML parsing exception
• added warning for duplicated MCID in content stream
• fixed CIDFontType2 font program parsing for OpenType fonts
• fixed ROS operator finding for CFF fonts

Validation

• (PDF/UA-2) include ISO 32005 rules to PDF/UA-2 profile
• (PDF/UA-2) added rule about Ref entry of Note structure element
• (PDF/UA-2) supported validation of Open Action destination
• (PDF/UA-2) disabled ActualText and Alt validation for non-real content
• (PDF/UA-2) fixed checking of role mapping structure types to the same namespace

veraPDF v1.24.2

What's Changed

• REL 1.24 - Set secure parameter for xslt transformation by @MaximPlusov in #1422

Full Changelog: v1.24.1...v1.24.2

v1.26.0 RC

CHANGES

Applications

• Improved REST API: more logical endpoints, documentation, web demo page, automatic deployment of the docker image to DockerHub.com
• Redesigned main GUI window
• Improved CLI output (help, debug logs, text report, JSON report formatting)
• Improved XML report schema in case of exceptions
• Fixed GUI check for the availability of a newer version

PDF Model

• Cleanup of the unused properties and links

PDF Parser

• Updated predefined CMaps
• Added support for structure attributes defined via ClassMap
• Fixed parsing of inline images of undefined length
• Detect and generate a warning when dictionary contains duplicated keys
• Detect and generate a warning when the embedded font has duplicated glyph names
• Detect and generate a warning in case of loops in document structure tree
• Fixed decryption of string objects
• Fix default whitepoint for CIELab in JPEG2000
• Optimized use of temporary files

Validation

• (PDF/UA-2) added partial support for PDF/UA-2 (draft) by implementing the checks that can be performed by software according to the Matterhorn Protocol
• (PDF/UA-1) detect and report structure elements with missing parent
• (PDF/UA-1) fixed checks related to role maps between standard and non-standard tags
• (PDF/UA-1) fixed rules related to annotations in structure tree
• (PDF/UA-1) added checks for XMP prefixes in the identification metadata
• (PDF/A-1,2,3,4) added check for valid values of BitsPerComponent
• (PDF/A-2,3,4) apply the rule on identical tint transform also to /All and /None
• (PDF/A-1) added check that the document does not use xref stream
• (PDF/A-1) Fix syncing XMP with Info dictionary in case of multiple creators