Source: jabref
Version: 3.8.2+ds-17
Severity: important
Your package depends on libpdfbox-java, which is a long EOLed version
with open security issues of what is packaged as libpdfbox2-java for
the current releases of Pdfbox.
Please port your package to use libpdfbox2-java instead.
Cheers,
Moritz