pymupdf
A high performance Python library for data extraction, analysis, conversion & manipulation of PDF (and other) documents.
PyPIDual Licensed - GNU AFFERO GPL 3.0 or Artifex Commercial License88%
Total Score
healthy
PyMuPDF has 140 releases, 10 active contributors, and 205 commits in three months, with only workflow pinning and security-policy gaps.
Health Score Breakdown
The release has no build attestation, trusted publisher identity, or staged-publishing record.
The release declares 9 runtime dependencies, including numpy, onnxruntime, pymupdf-layout, pymupdf4llm, and networkx.
Ten contributors committed in three months, but julian-smith-artifex-com made 143 of 205 commits, or 70 percent.
The repository uses pyproject and setuptools, but the collected tooling lists no security scanning tools.
The repository has no SECURITY.md file or other collected security policy.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-562115 PyMuPDF is vulnerable to Integer Overflow in versions 1.17.0 - 1.27.2. | 1.17.0 - 1.27.2 | High |
AIKIDO-2025-10959 PyMuPDF is vulnerable to Path Traversal in versions 1.26.5 - 1.26.6. | 1.26.5 - 1.26.6 | Medium |
AIKIDO-2025-10028 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. PyMuPDF is vulnerable to Denial of Service (DoS) in versions 1.18.17 - 1.25.1. | 1.18.17 - 1.25.1 | Low |
Package versions
| Version | Published | Vulnerabilities |
|---|---|---|
| 2.1 | 2 Nov 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 2.0 | 19 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.28.2 | 6 Aug 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.28.0 | 29 Jun 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.27.2.3 | 24 Apr 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.27.2.2 | 19 Mar 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 1.27.2 | 10 Mar 2026 | 0 0 critical, 1 total 1 1 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total |
| 1.27.1 | 11 Feb 2026 | 0 0 critical, 1 total 1 1 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total |
| 1.26.7 | 11 Dec 2025 | 0 0 critical, 1 total 1 1 high, 1 total 0 0 medium, 1 total 0 0 low, 1 total |
| 1.26.6 | 5 Nov 2025 | 0 0 critical, 2 total 1 1 high, 2 total 1 1 medium, 2 total 0 0 low, 2 total |
Maintainers
 Artifex |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 networkx Version * | — | — |
numpy Version * | — | — |
onnxruntime Version * | — | — |
pyyaml Version * | — | — |
pymupdf-layout Version ==2.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 8 years ago
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.