CVE-2026-3029

Опубликовано: 19 мар. 2026

Источник: debian

EPSS Низкий

Описание

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

Пакет	Статус	Версия исправления	Релиз	Тип
pymupdf	fixed	1.26.7+ds1-1		package
pymupdf	fixed	1.25.4+ds1-3+deb13u1	trixie	package
pymupdf	no-dsa		bookworm	package
pymupdf	postponed		bullseye	package

https://github.com/pymupdf/PyMuPDF/issues/4767
https://github.com/pymupdf/PyMuPDF/commit/756e1ee94421fb7c570ef49bfdac21c72025417d (1.26.7)

EPSS

Процентиль: 28%

0.00354

Низкий

CVE-2026-3029

CVSS3: 7.5

ubuntu

5 месяцев назад

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

CVE-2026-3029

CVSS3: 8.2

redhat

5 месяцев назад

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

CVE-2026-3029

CVSS3: 7.5

nvd

5 месяцев назад

A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF version, 1.26.5.

openSUSE-SU-2026:20887-1

suse-cvrf

2 месяца назад

Security update for python-PyMuPDF

GHSA-cxqh-p2w9-fmr7

github

5 месяцев назад

PyMuPDF has a path traversal in _main_.py

EPSS

Процентиль: 28%

0.00354

Низкий