Version 1.30.2 (June 3, 2026)

Security

• added Security policy (commit)
• fixed vulnerabilities related to unsecure parsing of Rich Text values and XFA forms (commits 1 2)
• fixed vulnerabilities related to unsecure parsing of PostScript syntax in /ToUnicode CMaps and PS Type1 fonts (commit)

Validation

• (PDF/UA-1) fixed missing validation error for the initial use of H (or Hn) structure element if Hn (resp. H) is located later in the document (commit)
• (PDF/UA-2, WTPDF-1) permitted Link and Markup annotations to be Artifacts (commits 1 2)

PDF Parser

• fixed glyph parser in case of a CFF subtable in OpenType (commit)
• fixed the logic of finding alternative description of an annotation (commit)
• fixed Default color space handing in case of Indexed inline images (commit)