Please privately report vulnerabilities in Xpdf API components directly in GitHub, here.

Please DO NOT report vulnerabilities publicly on our GitHub Issues page.
Please DO NOT publicly disclose vulnerabilities until we have had a chance to fix them.