PyPI/pymupdf CVE-2026-3029: high 7.5, EPSS 0.37%

PyMuPDF has a path traversal in _main_.py

Action: Upgrade pymupdf to 1.26.7 or later.

pip install pymupdf==1.26.7

Affected

Fixed versions

Sources

• osv: PYSEC-2026-3001
• nvd: CVE-2026-3029
• https://github.com/pymupdf/PyMuPDF
• https://www.kb.cert.org/vuls/id/504749
• http://github.com/pymupdf/PyMuPDF
• http://github.com/pymupdf/PyMuPDF/commit/603cafe38a183b8bab34f16d05043b4185d8d40a
• https://pypi.org/project/pymupdf
• https://github.com/advisories/GHSA-cxqh-p2w9-fmr7

CVE-2026-3029 · published 2026-07-13T14:36:43.974708Z · modified 2026-07-13T16:33:07.802779002Z · JSON