October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

Is wkhtmltopdf Still Maintained and Safe to Use?

wkhtmltopdf is no longer maintained upstream, but that alone does not prove every installation is unsafe. Assess the exact binary, wrapper, inputs, and permissions.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

No—wkhtmltopdf is no longer actively maintained upstream. GitHub archived its core repository on January 2, 2023, and the project organization says it is no longer maintained. Whether a particular installation is safe is a separate, conditional question: it depends on the exact binary and wrapper, what HTML and options they process, and the permissions and isolation around the renderer.

Is wkhtmltopdf still maintained?

No. GitHub marks the core repository read-only after its January 2, 2023 archive date: the wkhtmltopdf repository. The project organization is also marked archived and says it is no longer maintained: the wkhtmltopdf organization.

As an Amazon Associate I earn from qualifying purchases.

The release records need to be distinguished. The core releases page lists version 0.12.6 with a release date of June 10; its record does not establish a year in the information cited here. A separate packaging repository lists 0.12.6.1 r3, released May 22, 2023. That packaging revision is not a new upstream core release. Check the release pages for their records: core releases and packaging releases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Is it safe to use?

There is no evidence here to support either a blanket claim that every wkhtmltopdf installation is exploitable or a guarantee that a particular installation is safe. The project’s archived status means upstream maintenance and new fixes should not be expected. The risk in a deployment depends on the build and any downstream patches, the wrapper and its option handling, whether untrusted HTML or render options reach the process, and the process’s access to files and networks.

#1 Best Overall
PDF Extra 2024| Complete PDF Reader and Editor | Create, Edit, Convert, Combine, Comment, Fill & Sign PDFs | Lifetime License | 1 Windows PC | 1 User [PC Online code]
  • EDIT text, images & designs in PDF documents. ORGANIZE PDFs. Convert PDFs to Word, Excel & ePub.
  • READ and Comment PDFs – Intuitive reading modes & document commenting and mark up.
  • CREATE, COMBINE, SCAN and COMPRESS PDFs
  • FILL forms & Digitally Sign PDFs. PROTECT and Encrypt PDFs
  • LIFETIME License for 1 Windows PC or Laptop. 5GB MobiDrive Cloud Storage Included.

What the 0.12.6 hardening note does—and does not—say

The 0.12.6 release notes list “BREAKING CHANGE: block local filesystem access by default.” This documents a change to the default for local file access; it does not establish that every dangerous input or network behavior is blocked, nor does it certify all builds as safe. See the 0.12.6 release notes.

Recent advisories concern wrappers

A July 2026 Openwall advisory describes command injection in affected versions of the Perl wrapper Catalyst::View::Wkhtmltopdf before 0.6.1 when user-controlled render options are not validated. The advisory recommends upgrading that wrapper to 0.6.1 or later. It is a finding about the wrapper’s handling of options, not evidence that the same defect is in the wkhtmltopdf core executable: Openwall advisory.

Rank #2
MobiPDF Lifetime - Professional PDF Editor for Windows | Edit, Sign & Convert PDFs | Best Adobe Acrobat Pro Alternative | Lifetime License
  • Edit PDFs with Ease. Modify text, images, and layouts directly within your PDF documents.
  • Convert & Organize. Export PDFs to Word, Excel, or ePub, and organize files with ease.
  • Read & Annotate. Enjoy intuitive reading modes and powerful tools to comment, highlight, and mark up PDFs.
  • Create & Manage PDFs. Create new PDFs, combine multiple files, scan documents, and compress for easy sharing.
  • Fill & Sign Forms. Complete forms and digitally sign documents with secure e-signature tools.

NVD’s CVE-2026-16770 record describes a separate wrapper issue: PDF::WebKit versions up to 1.2 convert HTML meta-tag values into wkhtmltopdf command-line options. This is also a wrapper-specific finding, not a general claim that every core installation has that vulnerability: NVD CVE-2026-16770.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

These examples do not amount to a complete vulnerability inventory for every core build, downstream package, or deployment. For a definitive assessment, identify the exact components in your installation and review the advisories and security records that apply to them.

Rank #3
Adobe Acrobat Pro | PDF Software | Convert, Edit, E-Sign, Protect | PC/Mac Online Code | Activation Required
  • Create and edit PDFs. Collaborate with ease. E-sign documents and collect signatures. Get everything done in one app, wherever you go.
  • Edit text and images without jumping to another app.
  • E-sign documents or request e-signatures on any device. Recipients don’t need to log in to e-sign.
  • Convert PDFs to editable Microsoft Word, Excel, or PowerPoint documents.
  • Share PDFs for collaboration. Commenting features make it easy for reviewers to comment, mark up, and annotate.

What to check before keeping an existing installation

  1. Inventory the components. Record the exact wkhtmltopdf binary and package version, its source or distributor, and every wrapper or application that invokes it. Do not treat a packaging revision as an upstream core release.
  2. Trace untrusted input. Determine whether users can supply HTML, URLs, metadata, command options, or other values that affect rendering. Validate values and strictly allowlist any user-controlled options; do not pass arbitrary input through to a command line.
  3. Limit process permissions. Run the renderer with only the filesystem and network access it needs. Consider process- or container-level restrictions appropriate to your deployment. The 0.12.6 default concerning local filesystem access is not a substitute for isolating the process.
  4. Review wrapper advisories. If you use Catalyst::View::Wkhtmltopdf, check whether it is an affected version and follow the advisory’s upgrade guidance. If you use PDF::WebKit, assess whether the described meta-tag-to-option behavior applies to your integration.
  5. Test before changing versions or migrating. Compare representative documents, including long pages, fonts, images, links, headers and footers, and any application-specific rendering options. Verify both the PDF output and the behavior of failure cases before deploying a change.
  6. Plan a migration where practical. Compare candidate renderers against your templates, operational constraints, security requirements, and maintenance expectations. The evidence cited here does not evaluate specific alternatives or establish a single best replacement.

When should you migrate?

Migration is especially worth prioritizing if the renderer processes untrusted content or options, runs with broad file or network access, or depends on a wrapper affected by a security advisory. A controlled, isolated legacy workflow with trusted inputs may present a different risk profile, but the lack of upstream maintenance remains a reason to document the exception and make a migration plan. No source cited here establishes a universal deadline or a safe configuration for every use case.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

For screenshot capture, an alternative to consider

If your actual need is a website screenshot rather than a wkhtmltopdf-compatible PDF workflow, ScreenshotNeo is a website screenshot API and MCP server. It offers clean captures that remove known consent banners, newsletter popups, and chat widgets before capture, and bills only clean shots. Its MCP server lets AI agents use screenshot tools. It is not presented as a drop-in replacement for wkhtmltopdf or as a general PDF-renderer migration path.

Or skip the browser setup

Make a GET request for a screenshot; see the ScreenshotNeo API documentation for options.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Quick Recap

Bestseller No. 1
PDF Extra 2024| Complete PDF Reader and Editor | Create, Edit, Convert, Combine, Comment, Fill & Sign PDFs | Lifetime License | 1 Windows PC | 1 User [PC Online code]
PDF Extra 2024| Complete PDF Reader and Editor | Create, Edit, Convert, Combine, Comment, Fill & Sign PDFs | Lifetime License | 1 Windows PC | 1 User [PC Online code]
READ and Comment PDFs – Intuitive reading modes & document commenting and mark up.; CREATE, COMBINE, SCAN and COMPRESS PDFs
$99.99
Bestseller No. 2
MobiPDF Lifetime - Professional PDF Editor for Windows | Edit, Sign & Convert PDFs | Best Adobe Acrobat Pro Alternative | Lifetime License
MobiPDF Lifetime - Professional PDF Editor for Windows | Edit, Sign & Convert PDFs | Best Adobe Acrobat Pro Alternative | Lifetime License
Edit PDFs with Ease. Modify text, images, and layouts directly within your PDF documents.; Convert & Organize. Export PDFs to Word, Excel, or ePub, and organize files with ease.
$99.99
Bestseller No. 3
Adobe Acrobat Pro | PDF Software | Convert, Edit, E-Sign, Protect | PC/Mac Online Code | Activation Required
Adobe Acrobat Pro | PDF Software | Convert, Edit, E-Sign, Protect | PC/Mac Online Code | Activation Required
Edit text and images without jumping to another app.; Convert PDFs to editable Microsoft Word, Excel, or PowerPoint documents.
$239.88
Bestseller No. 4
PDF Extra Lifetime - Professional PDF Editor - Best Adobe Acrobat Pro Alternative - Lifetime License for Windows PC
PDF Extra Lifetime - Professional PDF Editor - Best Adobe Acrobat Pro Alternative - Lifetime License for Windows PC
Perfect Adobe Acrobat Pro alternative – lifetime license for Windows 10 and 11.; EDIT text, images, pages, hyperlinks, designs in PDF documents. ORGANIZE PDFs.
$99.99
Bestseller No. 5
PDF Pro 3 - PDF editor to create, edit, convert and merge PDFs - 100% Compatible with Adobe Acrobat - for Windows 11, 10, 8.1, 7
PDF Pro 3 - PDF editor to create, edit, convert and merge PDFs - 100% Compatible with Adobe Acrobat - for Windows 11, 10, 8.1, 7
ALL-IN-ONE SOLUTION – read, edit, convert, merge and protect your PDF files
$29.99
Best Value
PDF Pro 3 - PDF editor to create, edit, convert and merge PDFs - 100% Compatible with Adobe Acrobat - for Windows 11, 10, 8.1, 7
  • ALL-IN-ONE SOLUTION – read, edit, convert, merge and protect your PDF files
  • MAXIMUM FUNCIONALITY – create interactive forms, compare PDFs, bates numbering, find and replace text or colors, convert documents, OCR engine, comment, highlight, fill out and print forms, document protection and others
  • EASY TO INSTALL AND USE – well-structured user-interface, in-program instructions, free tech support whenever you need it
  • GREAT VALUE FOR MONEY - why spend a fortune if you can have maximum functionality at a reasonable price - this also fits the requirements of companies very well
Rank #4
PDF Extra Lifetime - Professional PDF Editor - Best Adobe Acrobat Pro Alternative - Lifetime License for Windows PC
  • Perfect Adobe Acrobat Pro alternative – lifetime license for Windows 10 and 11.
  • EDIT text, images, pages, hyperlinks, designs in PDF documents. ORGANIZE PDFs.
  • READ and Comment on PDFs – Intuitive reading modes & document commenting and mark up tools!
  • CREATE, COMBINE, SCAN and COMPRESS PDFs.
  • FILL forms & Digitally Sign PDFs. Work with Digital certificates
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webp

Cookie banners, popups, and chat widgets are removed before the shot; bot checks, blank pages, and failed loads are never billed. An MCP server lets AI agents take screenshots. The free plan includes 1,000 screenshots a month with no card; paid plans start at $5 for 3,000. Sign up for free and get 1,000 screenshots a month with no card.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.