Source: jabref Version: 3.8.2+ds-17 Severity: important Your package depends on libpdfbox-java, which is a long EOLed version with open security issues of what is packaged as libpdfbox2-java for the current releases of Pdfbox.
Please port your package to use libpdfbox2-java instead.
Cheers,
Moritz
