Which function in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf has been patched by the most CVEs?

init_string_walker in source/html/html-layout.c has been changed by 1 CVE fixes, from 2025 to 2025.

How large is a typical CVE fix in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf?

The median fix changes 10 lines. 79% of fixes change 20 lines or fewer, and 50% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#173 of 500 repositories

cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf

Name: cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 16, 2026

28

CVE fixes located

Published CVEs

27

Functions patched

Distinct function sites

28

Files patched

Distinct source files

2009–2026

Years covered

By CVE publication date

Overview

28 published CVEs have a fix traced to functions in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf, the earliest published in 2009. Those fixes changed 27 distinct functions across 28 files, in 82 patch hunks.

Among the 500 repositories tracked here, cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf ranks #173 by the number of CVEs with a located fix.

Most patched functions

Functions in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf changed by the most CVE fixes.

Most patched files

Files in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf changed by the most CVE fixes.

1source/pdf/pdf-device.c2 CVEs · 2 functions
2source/pdf/pdf-xref.c2 CVEs · 1 functions
3source/svg/svg-run.c2 CVEs · 1 functions
4source/fitz/util.c2 CVEs · 0 functions
5source/html/html-layout.c1 CVEs · 7 functions
6include/mupdf/fitz/stream.h1 CVEs · 3 functions
7source/pdf/pdf-clean-file.c1 CVEs · 3 functions
8source/pdf/pdf-appearance.c1 CVEs · 2 functions
9source/pdf/pdf-write.c1 CVEs · 2 functions
10source/tools/pdfextract.c1 CVEs · 2 functions

Fix size

How much code a CVE fix in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf changes, with backports counted once.

10

Median lines changed

Added plus removed, per CVE

79%

Fixes of 20 lines or fewer

Share of CVE fixes

50%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf, and the functions each fix changed.

Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference
CVE-2026-92413
Medium · CVSS 5.3
EPSS 0.6%2026-09-16
MuPDF < 1.27 mutool ANSI Injection via Metadata
CVE-2026-40505
Medium · CVSS 4.8
EPSS 0.2%2026-04-16
CVE-2026-3308
CVE-2026-3308
High · CVSS 7.8
EPSS 0.2%2026-03-31
Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
CVE-2025-15569
High · CVSS 7.3
EPSS 0.1%2026-02-10
MuPDF 1.23.0 through 1.27.0 Barcode Decoding Double Free
CVE-2026-25556
Medium · CVSS 5.9
EPSS 0.8%2026-02-06
CVE-2025-55780
CVE-2025-55780break_word_for_overflow_wrap walk_string init_string_walker
High · CVSS 7.5
EPSS 0.4%2025-09-23
CVE-2025-46206
CVE-2025-46206strip_outline strip_outlines pdf_rearrange_pages_imp
Medium · CVSS 6.5
EPSS 0.4%2025-08-04
CVE-2024-46657
CVE-2024-46657extractobject saveimage
Medium · CVSS 5.5
EPSS 0.3%2024-12-10
CVE-2020-26683
CVE-2020-26683
Medium · CVSS 5.5
EPSS 0.3%2023-08-22
CVE-2012-5340
CVE-2012-5340entry
High · CVSS 7.8
EPSS 5.7%2020-01-23
CVE-2019-7321
CVE-2019-7321jpeg_source_mgr
Critical · CVSS 9.8
EPSS 3.2%2019-06-13
CVE-2019-6131
CVE-2019-6131svg_state_s
Medium · CVSS 5.5
EPSS 1.5%2019-01-11

Get an alert for each new cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf CVE, with the patched functions and AI-written analysis.

Monitor cgi-bin-cgit.cgi-mupdf CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

goauthentik/authentik28 CVEs gocd/gocd28 CVEs mautic/mautic28 CVEs openbsd/src28 CVEs pmmp/PocketMine-MP28 CVEs rack/rack28 CVEs squid-cache/squid28 CVEs YesWiki/yeswiki28 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf.

How many CVEs have a located fix in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf?: 28 published CVEs have a fix traced to functions in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf, touching 27 functions across 28 files.
Which function in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf has been patched by the most CVEs?: init_string_walker in source/html/html-layout.c has been changed by 1 CVE fixes, from 2025 to 2025.
How large is a typical CVE fix in cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf?: The median fix changes 10 lines. 79% of fixes change 20 lines or fewer, and 50% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track cgit.ghostscript.com/cgi-bin-cgit.cgi-mupdf CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing