PyMuPDF vulnerabilities
CVEs whose affected-version data names the PyMuPDF package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-82035High· 7.1PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py, where the output filename is constructed by joining a document-controlled BaseFont name …
PyMuPDF through 1.28.2, fixed in commit b2c8f3a, contains a path traversal vulnerability in the font branch of extract_objects() in src/__main__.py, where the output filename is constructed by joining a document-controlled BaseFont name …
▾ TwilightPyMuPDF · PyMuPDFEPSS 0.32%via NVD
CVE-2026-3029MediumPyMuPDF has a path traversal in _main_.py
PyMuPDF has a path traversal in _main_.py
▾ Sunlitpymupdf · pymupdfEPSS 0.35%via OSV