1.8.0

DATE	CVE	VULNERABILITY TITLE	RISK
2018-10-05	CVE-2018-11797	In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree. local low complexity apache fedoraproject oracle	5.5
2016-06-01	CVE-2016-2175	Apache PDFBox before 1.8.12 and 2.x before 2.0.1 does not properly initialize the XML parsers, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted PDF. local low complexity apache debian	7.8