From c0d2c5d4085b2cae028e3614f41da6077cb3fa25 Mon Sep 17 00:00:00 2001
From: Reingold Shekhtel <raikbitters@gmail.com>
Date: Tue, 17 Dec 2024 13:59:01 +0100
Subject: [PATCH] Add itextpdf dependency to build.gradle

---
 build.gradle | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/build.gradle b/build.gradle
index 7692321e9b..a7a33fb564 100644
--- a/build.gradle
+++ b/build.gradle
@@ -116,6 +116,8 @@ dependencies {
     }
     implementation 'xerces:xercesImpl:2.12.2'
     implementation 'com.lowagie:itext:4.2.2'
+    // Fix CVE-2021-43113 in com.lowagie:itext:4.2.2
+    implementation 'com.itextpdf:itextpdf:5.5.13.4'
     // Fix CVE-2020-15522 in com.lowagie:itext:2.1.7.js7
     implementation 'org.bouncycastle:bcprov-jdk15on:1.70'
     // JasperReport's export to XLS uses Apache POI