65 matches found
PT-2026-59623
A path traversal and arbitrary file write vulnerability exist in the embedded get function in ' main .py' in PyMuPDF version, 1.26.5...
Security update for python-PyMuPDF (important)
openSUSE security update: security update for python-pymupdf ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20887-1 Rating: important References: bsc1259921 Cross-References: CVE-2026-3029 Affected Products: openSUSE Leap 16.0...
OPENSUSE-SU-2026:20887-1 Security update for python-PyMuPDF
This update for python-PyMuPDF fixes the following issues: Changes in python-PyMuPDF: - CVE-2026-3029: Fixed path traversal and arbitrary file write via the embeddedget function in main.py bsc1259921...
Integer Overflow or Wraparound
Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the pdfloadimageimp function. An attacker can achieve arbitrary code...
OPENSUSE-SU-2026:10416-1 python313-PyMuPDF-1.27.2.2-1.1 on GA media
These are all security issues fixed in the python313-PyMuPDF-1.27.2.2-1.1 package on the GA media of openSUSE Tumbleweed...
Path Traversal
PyMuPDF is vulnerable to Path Traversal. The vulnerability is due to improper validation of file paths in the embedded get function in main.py, allowing attackers to manipulate paths and write files outside the intended directory, leading to arbitrary file write...
SUSE CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
Directory Traversal
Overview PyMuPDF is an A high performance Python library for data extraction, analysis, conversion & manipulation of PDF and other documents. Affected versions of this package are vulnerable to Directory Traversal via the embeddedget function if the derived output path is not supplied with...
GHSA-CXQH-P2W9-FMR7 PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
PyMuPDF has a path traversal in _main_.py
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
aging-metaclock (0.1.0), contextifier (>=0.1.0, <=0.2.2) +15 more potentially affected by CVE-2026-3029 via pymupdf (>=1.26.5, <=1.26.6)
pymupdf PYPI version =1.26.5, =0.1.0, =0.5.0, =0.1.0, =1.26.5, =0.0.53, =0.13.1, =0.2.0, =0.5.0 and more Source cves: CVE-2026-3029 Source advisory: OSV:GHSA-CXQH-P2W9-FMR7...
CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
UBUNTU-CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
CVE-2026-3029
PyMuPDF version 1.26.5 is vulnerable to a path traversal and arbitrary file write vulnerability in the embedded_get function within __main__.py. The root cause is the improper handling of untrusted embedded file metadata, which is used directly as an output path. When the args.output parameter is...
CVE-2026-3029 CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...
aging-metaclock (0.1.0), contextifier (>=0.1.0, <=0.2.2) +15 more potentially affected by CVE-2026-3029 via pymupdf (>=1.26.5, <=1.26.6)
pymupdf PYPI version =1.26.5, =0.1.0, =0.5.0, =0.1.0, =1.26.5, =0.0.53, =0.13.1, =0.2.0, =0.5.0 and more Source cves: CVE-2026-3029 Source advisory: MEND:CVE-2026-3029...
CVE-2026-3029 CVE-2026-3029
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...