Nixpkgs security tracker

Login with GitHub

Details of issue NIXPKGS-2026-1036

NIXPKGS-2026-1036

GitHub issue published on

Permalink CVE-2026-3029

updated 1 month, 2 weeks ago by @LeSuisse Activity log

Created suggestion 2 months ago
@LeSuisse ignored
6 packages
- python312Packages.pymupdf4llm
- python313Packages.pymupdf4llm
- python314Packages.pymupdf4llm
- python312Packages.pymupdf-fonts
- python313Packages.pymupdf-fonts
- python314Packages.pymupdf-fonts
1 month, 2 weeks ago
@LeSuisse accepted 1 month, 2 weeks ago
@LeSuisse published on GitHub 1 month, 2 weeks ago

CVE-2026-3029

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

References

Affected products

PyMuPDF

<1.26.7

Matching in nixpkgs

pkgs.python312Packages.pymupdf

Python bindings for MuPDF's rendering library

nixos-25.11 1.26.6
- nixos-25.11-small 1.26.6
- nixpkgs-25.11-darwin 1.26.6

pkgs.python313Packages.pymupdf

Python bindings for MuPDF's rendering library

nixos-unstable 1.27.1
- nixpkgs-unstable 1.27.1
- nixos-unstable-small 1.27.1
nixos-25.11 1.26.6
- nixos-25.11-small 1.26.6
- nixpkgs-25.11-darwin 1.26.6

pkgs.python314Packages.pymupdf

Python bindings for MuPDF's rendering library

nixos-unstable 1.27.1
- nixpkgs-unstable 1.27.1
- nixos-unstable-small 1.27.1

Ignored packages (6)

pkgs.python312Packages.pymupdf4llm

PyMuPDF Utilities for LLM/RAG - converts PDF pages to Markdown format for Retrieval-Augmented Generation

nixos-25.11 pymupdf4llm-0.0.27
- nixos-25.11-small pymupdf4llm-0.0.27
- nixpkgs-25.11-darwin pymupdf4llm-0.0.27

pkgs.python313Packages.pymupdf4llm

PyMuPDF Utilities for LLM/RAG - converts PDF pages to Markdown format for Retrieval-Augmented Generation

nixos-unstable pymupdf4llm-0.3.4
- nixpkgs-unstable pymupdf4llm-0.3.4
- nixos-unstable-small pymupdf4llm-0.3.4
nixos-25.11 pymupdf4llm-0.0.27
- nixos-25.11-small pymupdf4llm-0.0.27
- nixpkgs-25.11-darwin pymupdf4llm-0.0.27

pkgs.python314Packages.pymupdf4llm

PyMuPDF Utilities for LLM/RAG - converts PDF pages to Markdown format for Retrieval-Augmented Generation

nixos-unstable pymupdf4llm-0.3.4
- nixpkgs-unstable pymupdf4llm-0.3.4
- nixos-unstable-small pymupdf4llm-0.3.4

pkgs.python312Packages.pymupdf-fonts

Collection of optional fonts for PyMuPDF

nixos-25.11 1.0.5
- nixos-25.11-small 1.0.5
- nixpkgs-25.11-darwin 1.0.5

pkgs.python313Packages.pymupdf-fonts

Collection of optional fonts for PyMuPDF

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5
nixos-25.11 1.0.5
- nixos-25.11-small 1.0.5
- nixpkgs-25.11-darwin 1.0.5

pkgs.python314Packages.pymupdf-fonts

Collection of optional fonts for PyMuPDF

nixos-unstable 1.0.5
- nixpkgs-unstable 1.0.5
- nixos-unstable-small 1.0.5

Package maintainers

@sarahec Sarah Clark <seclark@nextquestion.net>