diff --git a/doxia-modules/doxia-module-fo/pom.xml b/doxia-modules/doxia-module-fo/pom.xml
index e1a2f8e..d9059d2 100644
--- a/doxia-modules/doxia-module-fo/pom.xml
+++ b/doxia-modules/doxia-module-fo/pom.xml
@@ -85,7 +85,7 @@
     <dependency>
       <groupId>org.apache.xmlgraphics</groupId>
       <artifactId>fop</artifactId>
-      <version>2.3</version>
+      <version>2.4</version>
     </dependency>
     <dependency>
       <groupId>log4j</groupId>
diff --git a/pom.xml b/pom.xml
index 5c4a483..b31764f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -202,14 +202,6 @@
         <artifactId>plexus-component-annotations</artifactId>
         <version>1.7.1</version>
       </dependency>
-
-      <dependency><!-- remove when upgrade fop to higher than 2.3
-       https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8036 -->
-        <groupId>org.apache.pdfbox</groupId>
-        <artifactId>fontbox</artifactId>
-        <version>2.0.12</version>
-      </dependency>
-
       <dependency>
         <groupId>org.codehaus.plexus</groupId>
         <artifactId>plexus-utils</artifactId>