com.itextpdf:itextpdf vulnerabilities (Maven)

2 vulnerabilities.

• com.itextpdf:itextpdf Maven Command injection in itext7-core CVE-2021-43113 Fix available 9.8 CriticalDecember 15, 2021
• com.itextpdf:itextpdf Maven Improper Restriction of XML External Entity Reference in iText CVE-2017-9096 Public exploitFix available 8.8 HighNovember 8, 2017