CLSA-2026-1787667201 TuxCare security update for com.lowagie:itext (1 CVE)

TuxCare rebuilt com.lowagie:itext to address 1 CVE. Fixed in 2.0.8-tuxcare.1...

PT-2026-86137

TuxCare rebuilt com.lowagie:itext to address 1 CVE. Fixed in 2.0.8-tuxcare.1...

PT-2026-73588

TuxCare rebuilt com.lowagie:itext to address 1 CVE. Fixed in 2.1.7-tuxcare.1...

ar.com.fdvs:dynamicjasper (4.0.4), au.net.causal.maven.plugins:html2pdf-maven-plugin (2.0) +638 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.7)

com.lowagie:itext MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - ar.com.fdvs:dynamicjasper 4.0.4 - au.net.causal.maven.plugins:html2pdf-maven-plugin 2.0 - be.valuya.winbooks:winbooks-api-ext...

io.github.martinhickson:jboss-seam-pdf-jakarta (>=2.4.1-bravura-36, <=2.4.1-bravura-38), org.chtijbug.drools:drools-framework-rest-guvnor (>=drools-framework-parent-1.5.3, <=1.5.2) +17 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.2)

com.lowagie:itext MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - io.github.martinhickson:jboss-seam-pdf-jakarta =2.4.1-bravura-36, =drools-framework-parent-1.5.3,...

africa.absa:inception-reporting (>=1.0.0, <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0, <=1.2.0) +284 more potentially affected by CVE-2017-9096 via com.lowagie:itext (>=4.2.0, <=4.2.2)

com.lowagie:itext MAVEN version =4.2.0, =1.0.0, =1.0.0, =2.0.7, =1.0.0, =1.0.7, =2.1.0, =2.1.0, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =v1.0.26, =1.0.58 and more Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...

africa.absa:inception-reporting (>=1.0.0, <=1.2.0), africa.absa:inception-reporting-api (>=1.0.0, <=1.2.0) +284 more potentially affected by CVE-2017-9096 via com.lowagie:itext (>=4.2.0, <=4.2.2)

com.lowagie:itext MAVEN version =4.2.0, =1.0.0, =1.0.0, =2.0.7, =1.0.0, =1.0.7, =2.1.0, =2.1.0, =1.0.2, =1.0.4, =1.0.2, =1.0.16, =1.0.2, =1.0.4, =v1.0.26, =1.0.58 and more Source cves: CVE-2017-9096 Source advisory: GHSA-86P9-X5PW-94QX...

ar.com.fdvs:dynamicjasper (>=3.0.2, <=3.0.13), br.com.caelum.stella:boleto-example (>=1.0, <=1.2) +38 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.0)

com.lowagie:itext MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - ar.com.fdvs:dynamicjasper =3.0.2, =1.0, =1.0, =1.0, =9.00.2110.07.220316, =1.0.26, =3.0.1, =3.6.0, =1.1.1, =2.1.8, =1.2.0,...

com.github.yujiaao:c-jmesa (>=1.0.1-m1, <=1.1.13), com.github.yujiaao:c-tablegen-demo (>=1.1.5, <=1.1.13) +5 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.3)

com.lowagie:itext MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.github.yujiaao:c-jmesa =1.0.1-m1, =1.1.5, =4.0.1, =1.0.1-m1, =1.0.1-m1, =2.5.2, =3.0.4 Source cves: CVE-2017-9096 Source...

com.gitee.huanminabc:file-tool (>=1.0.0-release, <=1.0.3-release), com.gitee.huanminabc:utils-server (>=1.0.0-release, <=1.0.3-release) +99 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.0.8)

com.lowagie:itext MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.gitee.huanminabc:file-tool =1.0.0-release, =1.0.0-release, =1.0.0-release, =6.0, =2.5, =1.1.14, =1.1.14, =4.2.0, =1.1.14,...

it.micegroup.displaytag:displaytag (>=2.0, <=2.1), it.micegroup:displaytag (2.2) +29 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.4.8)

com.lowagie:itext MAVEN version 1.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - it.micegroup.displaytag:displaytag =2.0, =0.9.4, =0.9.4, =0.6, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.2...

com.nerderg.ajaxanywhere:ajaxanywhere-testapp (>=2.0, <=2.1.1), displaytag:displaytag (>=1.1.1, <=1.2) +18 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.3)

com.lowagie:itext MAVEN version 1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.nerderg.ajaxanywhere:ajaxanywhere-testapp =2.0, =1.1.1, =1.1.1, =1.1.1, =1.1.1, =2.3.0, =2.1.0-m1, =2.1.0-m1, =2.1.0-m1,...

ai.libs:jaicore-ea (>=0.1.0, <=0.2.7), com.d3xsystems:d3x-morpheus-viz (>=1.0.22, <=1.0.31) +406 more potentially affected by CVE-2017-9096 via com.lowagie:itext (2.1.5)

com.lowagie:itext MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - ai.libs:jaicore-ea =0.1.0, =1.0.22, =1.0.2, =0.2.0, =adempiere-3.9.4-abp-1.0.3, =1.0.0, =1.0.0, =shw-1.0.0, =1.0.0, =1.0.0,...

com.github.nruzic.org.apache.maven.doxia:doxia-doc-renderer (>=1.8.1-interpolation-hotfix-rc4, <=1.8.1.1), com.github.spyhunter99:findbugs-report-plugin (>=1.0.0, <=1.0.2) +11 more potentially affected by CVE-2017-9096 via com.lowagie:itext (1.4)

com.lowagie:itext MAVEN version 1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - com.github.nruzic.org.apache.maven.doxia:doxia-doc-renderer =1.8.1-interpolation-hotfix-rc4, =1.0.0, =1.0.2, =1.5.0.1,...

net.sf.datavision:datavision (1.1.0) potentially affected by CVE-2017-9096 via com.lowagie:itext (2.0.1)

com.lowagie:itext MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.lowagie:itext and may be impacted: - net.sf.datavision:datavision 1.1.0 Source cves: CVE-2017-9096 Source advisory: OSV:GHSA-86P9-X5PW-94QX...