Am 04.03.2022 um 16:05 schrieb Tim Allison:
All, POI just made a release that fixes a DoS CVE[1]. I've upgraded both main and 1.x. We should probably plan to start a release in the next few weeks? Anything else we should wait for or try to get into the next releases?
The recently released PDFBox JBIG2 plugin 3.0.4 Tilman
Best,
Tim
[1] https://lists.apache.org/thread/ckz7nn1rzpclrx8nh32wk6jyx3kwfjgc
