~ / search / GHSA-cxqh-p2w9-fmr7

GHSA-cxqh-p2w9-fmr7

PyMuPDF has a path traversal in _main_.py

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-3029

Packages

EcosystemPackageAffectedFixed in
PyPI PyMuPDF >= 1.26.5, < 1.26.7 1.26.7

Details

As written in the advisory (Markdown source, shown as plain text).

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

References

External links from the advisory. They lead to third-party sites.