Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
itext/itextpdf
develop @ 9f883c6
4
Fixes
7
CVEs
CRITICAL
Peak severity
50.0%
Coverage
Highlights
Cryptographic Issues: 1 prior fix. Scrutinize any change in this area.
itext/src/main/java/com/itextpdf/text/pdf/AcroFields.java: most-fixed (2 issues). Treat as high-risk during review.
3 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
XML External Entity (XXE): Parsing XML data (such as XFA/XML signatures) without restricting external entities and stylesheets allows remote attackers to perform server-side request forgery (SSRF) or read sensitive local files. Secure processing features must be explicitly configured on TransformerFactory and DocumentBuilder instances.
Signature Bypass: Flaws in evaluating signature coverage allow attackers to append unauthorized content to a signed document without invalidating the cryptographic signature. Rigorous path canonicalization and byte-range verification are required to ensure the signature spans the actual file length.
Cryptographic Issues: Validating signatures using raw, encrypted stream bytes instead of decrypted content can lead to failure in establishing cryptographic trust or lead to signature validation bypasses on encrypted PDF files.