Moderators:PDF-XChange Support, Daniel - PDF-XChange, Chris - PDF-XChange, Sean - PDF-XChange, Paul - PDF-XChange, Vasyl - PDF-XChange, Ivan - Tracker Software, Stefan - PDF-XChange
Forum rules DO NOT post your license/serial key, or your activation code - these forums, and all posts within, are public and we will be forced to immediately deactivate your license.
When experiencing some errors, use the IAUX_Inst::FormatHRESULT method to see their description and include it in your post along with the error code.
we're using PDF-XChange Editor SDK 11.1.1.0 (x64 and x86 DLL).
A customer has run a security audit on our application, with the result that they cannot allow installation of our application because of its dependencies.
Here is the information they provided:
OpenSSL 3.5.6, affected by publicly disclosed and unpatched vulnerabilities, including CVE-2026-84782, rated as high severity, which were fixed upstream in version 3.5.9 released on 29 September 2026.
JavaScript engine SpiderMonkey 78.15.1, used by Firefox ESR 78, which reached end of life on 22 November 2021.
We were able to confirm that these dependencies are coming in via the PDF-XChange SDK.
Can you comment on this? Are there plans to at address these issues? Thank you!
Regarding the JS engine being past EoL, this does not necessitate a replacement - many of our competitors use engines which are older than this one, and for good reason - they are stable. Should a need to update arise, we will do so, but it is not a priority at this time.
Kind regards,
Dan McIntyre - Support Technician
PDF-XChange Co. LTD
+++++++++++++++++++++++++++++++++++
Our Web site domain and email address has changed as of 26/10/2023.
https://www.pdf-xchange.com [email protected]
