Release date: October 25 2022

pdfXFA is an iText 7 add-on for Java and C# (.NET) that allows you to flatten dynamic XFA forms to static PDF. It also enables you to add a digital signature to converted XFA forms as additional security for further processing in PDF workflows or for archiving.

There are a few things to mention for this release of pdfXFA. Firstly, we’ve replaced our log4j dependency to resolve the CVE vulnerabilities associated with this logging framework. While these vulnerabilities should not pose any serious threat providing you don’t give the attacker write access and follow basic security practices, we’ve now switched to using version 1.2.11 of the Logback Classic Module.

In addition, there was an issue where subforms corresponding to pages could be skipped in some cases, resulting in dynamic content being placed on the wrong page. This has now been resolved.

In other news, we’ve fixed a couple of bugs affecting document flattening. One where the flattening process could get stuck in an infinite loop when tabs were present in the XML, and an issue where an XObject could shift position, and affect the layout in the flattened file.

If you need to process XFA documents, we have a related blog post that may be interesting to you:


  • Fix failing vulnerabilities for log4j-1.2.17 (updated log4j dependencies so that CVE scanners stop bothering people)


  • Flattening was getting stuck in an infinite loop if tab symbol is present

  • XObject were shifting to the right during flattening

  • In hybrid files, static content can desync with dynamic content due to empty pages in the template

Installation Instructions

Examples (latest ones)

FAQ (latest ones)