Source: king Version: 2.24+dfsg2-2 Severity: important Your package depends on libpdfbox-java, which is a long EOLed version with open security issues of what is packaged as libpdfbox2-java for the current releases of Pdfbox. Please port your package to use libpdfbox2-java instead. Cheers, Moritz