It was discovered that pdfbox, a PDF library for Java, was susceptible
to XML External Entity attacks.