diff --git a/build.gradle b/build.gradle
index 4d548349c3..852d71d6f9 100644
--- a/build.gradle
+++ b/build.gradle
@@ -156,7 +156,7 @@ subprojects {
         xmlbeansVersion = '5.1.1'
         batikVersion = '1.15'
         graphics2dVersion = '0.41'
-        pdfboxVersion = '2.0.26'
+        pdfboxVersion = '2.0.27'
         saxonVersion = '11.4'
         apiGuardianVersion = '1.1.2'
 
diff --git a/build.xml b/build.xml
index 0df43193c3..4fbfde0fab 100644
--- a/build.xml
+++ b/build.xml
@@ -325,8 +325,8 @@ under the License.
     <dependency prefix="svg.batik-transcoder" artifact="org.apache.xmlgraphics:batik-transcoder:1.15" usage="ooxml-batik"/>
     <dependency prefix="svg.batik-util" artifact="org.apache.xmlgraphics:batik-util:1.15" usage="ooxml-batik"/>
     <dependency prefix="svg.batik-xml" artifact="org.apache.xmlgraphics:batik-xml:1.15" usage="ooxml-batik"/>
-    <dependency prefix="pdf.pdfbox" artifact="org.apache.pdfbox:pdfbox:2.0.26" usage="ooxml-provided"/>
-    <dependency prefix="pdf.fontbox" artifact="org.apache.pdfbox:fontbox:2.0.26" usage="ooxml-provided"/>
+    <dependency prefix="pdf.pdfbox" artifact="org.apache.pdfbox:pdfbox:2.0.27" usage="ooxml-provided"/>
+    <dependency prefix="pdf.fontbox" artifact="org.apache.pdfbox:fontbox:2.0.27" usage="ooxml-provided"/>
     <dependency prefix="pdf.graphics2d" artifact="de.rototor.pdfbox:graphics2d:0.41" usage="ooxml-provided"/>
 
     <!-- jars in the ooxml-lib directory, see the fetch-ooxml-jars target-->