Is pdfkit safe to use?

pdfkit has 2 known vulnerabilities on the latest version (1.0.0). DepScope rates its health at 45/100 (high risk).

What is the latest version of pdfkit?

The latest version of pdfkit is 1.0.0, released 2021-11-14.

Yes. pdfkit has 2 known vulnerabilities. See depscope.dev/pkg/pypi/pdfkit for details.

No, pdfkit is actively maintained. Latest release: 1.0.0 (2021-11-14).

Popular alternatives to pdfkit in PyPI include: certifi, requests, typing-extensions, botocore, pygments.

pypiv1.0.0

Wkhtmltopdf python wrapper to convert html to pdf using the webkit rendering engine and qt

License MITpermissive9 versions1 maintainers0 deps938,258 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Health breakdown0 – 100

0/25

maintenance

14/20

popularity

15/25

security

6/15

maturity

2/15

community

8/15

popularity_floor

Vulnerabilities

Advisories (2)

Severity	ID	Summary	Fixed in
high	CVE-2025-26240	pdfkit: Path traversal in from_string	—
high	CVE-2025-26240	pdfkit: Path traversal in from_string	—

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/pdfkit