PyPI · #1262 most downloaded on PyPI

py7zr

1.1.38.7M downloads/momiurahr/py7zr ↗New releases in your daily digest, changelog included.

Pure python 7-zip library

Last release 3 months ago
19 Jun 2026
Ships fairly regularly
a new release about every 4 months
Some releases are documented
notes for 24 of the last 60 stable releases
27 versions withdrawn
withdrawn after publishing
7 years old
165 releases · first in 2019

Release timeline

165 releases since 2019

20192020202120222023202420252026

Releases

1.1.319 Jun 2026Security
CVE-2026-23879: Arbitrary File Write Vulnerability in py7zr (high severity)
CVE-2026-23879: Arbitrary File Write Vulnerability in py7zr (high severity)

Harden check of path traversal and enhance test cases to reproduce many attack scenarios.

CVE-2026-55206: O(n^2) algorithmic complexity DoS in PackInfo._read() in py7zr

Enforced variation of the parameter with a limit and optimized calculation algorithm to prevent excessive CPU consumption.

CVE-2026-55195: py7zr <= 1.1.2: Decompression bomb (zip bomb) denial of service via unchecked extraction size

Added check of extraction size and introduced max_extract_size as constructor parameter to guard against excessive decompression.
Open source →
Additional notes2 sources agree
Security

CVE-2026-23879: Arbitrary File Write Vulnerability in py7zr (high severity)

Harden check of path traversal and enhance test cases to reproduce many attack scenarios.

CVE-2026-55206: O(n^2) algorithmic complexity DoS in PackInfo._read() in py7zr

Enforced variation of the parameter with a limit and optimized calculation algorithm to prevent excessive CPU consumption.

CVE-2026-55195: py7zr <= 1.1.2: Decompression bomb (zip bomb) denial of service via unchecked extraction size

Added check of extraction size and introduced max_extract_size as constructor parameter to guard against excessive decompression.

Notes:

Fixed three security vulnerabilities in the py7zr library.

Improvements made include path traversal hardening, optimization of CPU-intensive algorithms, and protection against zip bombs.

Fixed

BufferError when calling Py7zBytesIO.size() (#736,#737)

fix: extractall() raises TypeError: int() argument must be a string, a bytes-like object or a real number, not ‘NoneType’ (#734,#735)

Changed

feat(io): add Py7zIO.close() lifecycle hook called once per extracted file (#699,#732)

test: Bump dependency libarchive @ 3 . 8 . 7

ci: bump numerous actions with SHA256 hash and newer versions (#729,#730)

One column per quarter.

1.1.218 Jan 2026withdrawn: Incomplete security fix; do not use.Security2 sources agree

- security: fix Zip-Slip vulnerability by symlink

Security

security: fix Zip-Slip vulnerability by symlink

Removed

Remove Code of Conduct from repository.

Changed

remove unused _lzma imports

Open source →

1.1.021 Dec 2025Security

CVE-2025-6176: bump brotli@1.2.0

Requirements

Minimum required Python 3.10
Add support for Python 3.14

Security

CVE-2025-6176: bump brotli@1.2.0

Fixed

The is_78zfile accept any path-like
The SevenZipFile accept IO[bytes]
Make FileInfo and ArchiveInfo dataclasses
The getInfo() returns FileInfo object

What's Changed in details

Add type annotations to ExtractCallback by @JohnDevlopment in https://github.com/miurahr/py7zr/pull/668
fix(is_7zfile): accept any path-like instead of just pathlib.Path by @Ravencentric in https://github.com/miurahr/py7zr/pull/663
Fix WriterFactory example by @mxmlnkn in https://github.com/miurahr/py7zr/pull/660
Update docs on deflate64 dependency by @quassy in https://github.com/miurahr/py7zr/pull/671
Accept IO[bytes] instead of BinaryIO by @mxmlnkn in https://github.com/miurahr/py7zr/pull/661
feat(cli): add support for extracting specific archive members by @moi90 in https://github.com/miurahr/py7zr/pull/670
chore: fix broken Changelog link by @orgads in https://github.com/miurahr/py7zr/pull/674
fix: SevenZipFile.getinfo() now returns FileInfo as originally intended by @Ravencentric in https://github.com/miurahr/py7zr/pull/676
fix: type hints and style by @Ravencentric in https://github.com/miurahr/py7zr/pull/677
feat: make FileInfo and ArchiveInfo dataclasses by @Ravencentric in https://github.com/miurahr/py7zr/pull/678
feat: add is_file and is_symlink to FileInfo by @Ravencentric in https://github.com/miurahr/py7zr/pull/680
style: apply black by @miurahr in https://github.com/miurahr/py7zr/pull/685
Use zstandard implementation from stdlib (PEP-784) by @Rogdham in https://github.com/miurahr/py7zr/pull/682
chore: update supported Python versions, refine workflows and tox configuration by @miurahr in https://github.com/miurahr/py7zr/pull/687
security: bump brotli@1.2.0 by @miurahr in https://github.com/miurahr/py7zr/pull/686
chore: bump minimum Python version to 3.10 and update development deps by @miurahr in https://github.com/miurahr/py7zr/pull/688
Update build dependencies and drop 3.9 and pypy 3.10 by @Ravencentric in https://github.com/miurahr/py7zr/pull/691
chore: bump workflow dependencies, update Python versions, and refine matrix configurations by @miurahr in https://github.com/miurahr/py7zr/pull/692
chore: tox configuration in pyproject.toml native by @miurahr in https://github.com/miurahr/py7zr/pull/689
Use 3.10 type hint syntax by @Ravencentric in https://github.com/miurahr/py7zr/pull/690
README: Bump PyPy/Python - Minimum & Recommended versions. by @xavier2k6 in https://github.com/miurahr/py7zr/pull/700
Update run-linter workflow by @xavier2k6 in https://github.com/miurahr/py7zr/pull/698
Update publish-to-pypi workflow by @xavier2k6 in https://github.com/miurahr/py7zr/pull/697
Update codeql-analysis workflow by @xavier2k6 in https://github.com/miurahr/py7zr/pull/696
Update run-tox-tests workflow by @xavier2k6 in https://github.com/miurahr/py7zr/pull/695

New Contributors

@JohnDevlopment made their first contribution in https://github.com/miurahr/py7zr/pull/668
@mxmlnkn made their first contribution in https://github.com/miurahr/py7zr/pull/660
@quassy made their first contribution in https://github.com/miurahr/py7zr/pull/671
@moi90 made their first contribution in https://github.com/miurahr/py7zr/pull/670
@orgads made their first contribution in https://github.com/miurahr/py7zr/pull/674
@Rogdham made their first contribution in https://github.com/miurahr/py7zr/pull/682

Full Changelog: https://github.com/miurahr/py7zr/compare/v1.0.0...v1.1.0

Open source →

Additional notes

Requirements

Minimum required Python 3.10
Add support for Python 3.14

Security

CVE-2025-6176: bump brotli@1.2.0

Fixed

The is_78zfile accept any path-like
The SevenZipFile accept IO[bytes]
Make FileInfo and ArchiveInfo dataclasses
The getInfo() returns FileInfo object

What's Changed in details

Add type annotations to ExtractCallback by @JohnDevlopment in #668
fix(is_7zfile): accept any path-like instead of just pathlib.Path by @Ravencentric in #663
Fix WriterFactory example by @mxmlnkn in #660
Update docs on deflate64 dependency by @quassy in #671
Accept IO[bytes] instead of BinaryIO by @mxmlnkn in #661
feat(cli): add support for extracting specific archive members by @moi90 in #670
chore: fix broken Changelog link by @orgads in #674
fix: SevenZipFile.getinfo() now returns FileInfo as originally intended by @Ravencentric in #676
fix: type hints and style by @Ravencentric in #677
feat: make FileInfo and ArchiveInfo dataclasses by @Ravencentric in #678
feat: add is_file and is_symlink to FileInfo by @Ravencentric in #680
style: apply black by @miurahr in #685
Use zstandard implementation from stdlib (PEP-784) by @Rogdham in #682
chore: update supported Python versions, refine workflows and tox configuration by @miurahr in #687
security: bump brotli@1.2.0 by @miurahr in #686
chore: bump minimum Python version to 3.10 and update development deps by @miurahr in #688
Update build dependencies and drop 3.9 and pypy 3.10 by @Ravencentric in #691
chore: bump workflow dependencies, update Python versions, and refine matrix configurations by @miurahr in #692
chore: tox configuration in pyproject.toml native by @miurahr in #689
Use 3.10 type hint syntax by @Ravencentric in #690
README: Bump PyPy/Python - Minimum & Recommended versions. by @xavier2k6 in #700
Update run-linter workflow by @xavier2k6 in #698
Update publish-to-pypi workflow by @xavier2k6 in #697
Update codeql-analysis workflow by @xavier2k6 in #696
Update run-tox-tests workflow by @xavier2k6 in #695

New Contributors

@JohnDevlopment made their first contribution in #668
@mxmlnkn made their first contribution in #660
@quassy made their first contribution in #671
@moi90 made their first contribution in #670
@orgads made their first contribution in #674
@Rogdham made their first contribution in #682

Full Changelog: v1.0.0...v1.1.0

Additional notes2 sources agree

Same as v1.1.0rc4

Open source →

1.1.0rc421 Dec 2025pre-release2 sources agree

- CI: Ensure nearest tag is fetched in publish-to-pypi workflow

Changed

CI: Ensure nearest tag is fetched in publish-to-pypi workflow

Streamlined pypi source package by pruning docs, tests and utils

Open source →

1.1.0rc220 Dec 2025pre-release2 sources agree

- CI: update workflows (#695,#696,#697,#698,#692)

Changed

CI: update workflows (#695,#696,#697,#698,#692)

Update tox configuration with TOML native (#689)

Type hint syntax for Python 3.10 and later (#690)

Document

README: Minimum & Recommended Python/PyPY versions (#700)

Open source →

1.0.02 Jun 2025

Celebrating the official 1.0.0 release!

Release version 1.0.0

Celebrating the official 1.0.0 release!

Open source →

Additional notes2 sources agree

Celebrating the official 1.0.0 release!

Changed

CI: check on Linux on ARM64 with GitHub hosted ARM64 runner.

Improve issue report template

Remove Travis-CI button from Documentation

Open source →

1.0.0rc315 May 2025pre-release2 sources agree

- Fix installation on python 3.13 by allowing pyppmd 1.2.0

Fixed

Adjust MANIFEST.in

Fix installation on python 3.13 by allowing pyppmd 1.2.0

Changed

CI: update aarch64 tests on Ubuntu 24.04

Open source →

1.0.0rc223 Dec 2024pre-release

Signed-off-by: Hiroshi Miura miurahr@linux.com

Open source →

Additional notes2 sources agree

There is big incompatible change after -rc1 version.

Removed

Remove SevenZipFile.read() and SevenZipFile.readall() (#620) This confuse users to use as same as ZipFile method, but not the same. Using this method can easily exhaust a machine memory.

Added

Add factory parameter that takes WriterFactory object which provides an object that implements Py7zIO interface. (#620) This allow user to interact with Py7zr for large archives. (#620)

Deprecated

deprecation for writed method

Changed

Minimum required Python version to be Python 3.9 (#619)

Support Python 3.13 (#619)

Remove code paths that checked for python versions less than 3.9

Update CI/GitHub Actions(#619)

Drops 3.8 and adds 3.13 to the test matrix

Update all the GitHub actions to their latest versions

Upgrade aarch64 from ubuntu20.04+py39 to ubuntu22.04+py310.

Replace old style strings with f-strings(#619)

Replace typing.List (and similar) with their standard equivalent(#619)

Open source →

1.0.0rc18 Aug 2024pre-release

Bump dependencies versions - pycryptodomex @ 3 . 32 . 0

Changed

Bump dependencies versions

pycryptodomex @ 3 . 32 . 0

pyzstd @ 0 . 16 . 1

sphinx @ 7 . 0 . 0

mypy @ 1 . 10 . 0

mypy_extensions @ 1 . 0 . 0

isort @ 5 . 13 . 2

black @ 24 . 8 . 0

Open source →

Additional notes

Changed

Bump dependencies versions

Open source →

0.22.08 Aug 20242 sources agree

- Add mode “x” for SevenZipFile

Added

Add mode “x” for SevenZipFile (#588)

Add SevenZipFile#namelist method (#600)

Fixed

Append mode on non-existent files (#604)

Fix NUMBER encoding of integer when 8 bytes(#591)

Changed

Minimum required Python version to be Python 3.8 (#601)

Remove pyannotate from pyproject.toml (#598)

Document

Update user guide (#596)

Open source →

0.21.11 Jul 2024

Treat zero byte stream as a file. by @diedmon in https://github.com/miurahr/py7zr/pull/551

What's Changed

Treat zero byte stream as a file. by @diedmon in https://github.com/miurahr/py7zr/pull/551
feat: check targets argument type for read and extract method by @miurahr in https://github.com/miurahr/py7zr/pull/577
feat: Add recursive sudirectories and files extraction. by @nepiskopos in https://github.com/miurahr/py7zr/pull/585
feat: ensure unpack_7zarchive closes the archive by @francoisfreitag in https://github.com/miurahr/py7zr/pull/584
docs: Use same format for unpack_archive example as for make_archive by @hoel-bagard in https://github.com/miurahr/py7zr/pull/590
fix bug in function is_64bit() by @johnking0099 in https://github.com/miurahr/py7zr/pull/580
feat: make unpack_7zarchive raise ReadError for invalid files by @francoisfreitag in https://github.com/miurahr/py7zr/pull/583

New Contributors

@diedmon made their first contribution in https://github.com/miurahr/py7zr/pull/551
@nepiskopos made their first contribution in https://github.com/miurahr/py7zr/pull/585
@francoisfreitag made their first contribution in https://github.com/miurahr/py7zr/pull/584
@hoel-bagard made their first contribution in https://github.com/miurahr/py7zr/pull/590
@johnking0099 made their first contribution in https://github.com/miurahr/py7zr/pull/580

Full Changelog: https://github.com/miurahr/py7zr/compare/v0.21.0...v0.21.1

Open source →

Additional notes

Fixed

Follow shutil.register_unpack_format() convention of raising a ReadError when the library cannot handle a file (#583)

ensure unpack_7zarchive closes the archive (#584)

64bit OS detection (#580)

Added

Add recursive sub-directories and files extraction (#585)

Changed

check targets argument type for read and extract method (#577)

Treat zero byte stream as a file (#551)

py7zr

py7zr -- a 7z library

Navigation

User Guide
Advanced usage
Security Policy
API Documentation
Contributor guide
.7z format specification
Authors
Glossary
Py7zr Changelog
Unreleased
v1.1.3
Security
Fixed
Changed
v1.1.2
Security
Removed
Changed
v1.1.1
Fixed
Changed
v1.1.0
v1.1.0rc4
Changed
v1.1.0rc2
Changed
Document
v1.1.0rc1
Security
Added
Changed
Removed
v1.0.0
Changed
v1.0.0rc3
Fixed
Changed
v1.0.0rc2
Removed
Added
Deprecated
Changed
v1.0.0-rc1
Changed
v0.22.0
Added
Fixed
Changed
Document
v0.21.1
Fixed
Added
Changed
Previous changes

Quick search

Donate/support

| Powered by Sphinx 9.1.0 & Alabaster 1.0.0 | Page source

Open source →

Additional notes

Fixed

Follow shutil.register_unpack_format() convention of raising a ReadError when the library cannot handle a file (#583)
ensure unpack_7zarchive closes the archive (#584)
64bit OS detection (#580)

Added

Add recursive sub-directories and files extraction (#585)

Changed

check targets argument type for read and extract method (#577)
Treat zero byte stream as a file (#551)

Open source →

0.21.02 Mar 2024

Speed up extraction when number of files is large

Open source →

0.20.813 Nov 2023

Nothing published for this version

0.20.75 Nov 2023

Nothing published for this version

0.20.65 Aug 2023

Nothing published for this version

0.20.515 Apr 2023

Nothing published for this version

0.20.410 Feb 2023

Drop manual GC to improve performance

Fixed

Installation error on Cygwin
Drop manual GC to improve performance

Open source →

0.20.22 Nov 2022

Nothing published for this version

0.20.11 Nov 2022withdrawn: Has critical bug on path check

Nothing published for this version

0.20.02 Aug 2022

Nothing published for this version

0.19.23 Nov 2022

Backport secuirty fix and improvements from v0.20.2

Open source →

0.19.11 Nov 2022withdrawn: Has critical bug on path check

Nothing published for this version

0.19.02 Jul 2022

Nothing published for this version

0.18.123 Nov 2022

Backport secuirty fix and improvements from v0.20.2

Open source →

0.18.111 Nov 2022withdrawn: Has critical bug on path check

Nothing published for this version

0.18.102 Jul 2022

Nothing published for this version

0.18.94 Jun 2022

Nothing published for this version

0.18.71 Jun 2022

Nothing published for this version

0.18.617 May 2022

Nothing published for this version

0.18.522 Apr 2022

Nothing published for this version

0.18.417 Apr 2022

Nothing published for this version

0.18.326 Mar 2022

Nothing published for this version

0.18.112 Mar 2022

Nothing published for this version

0.18.08 Mar 2022

Nothing published for this version

0.17.49 Feb 2022

Nothing published for this version

0.17.324 Jan 2022

Nothing published for this version

0.17.215 Dec 2021

Nothing published for this version

0.17.115 Dec 2021

Nothing published for this version

0.17.04 Dec 2021

Nothing published for this version

0.16.41 Dec 2021

Nothing published for this version

0.16.314 Nov 2021

Nothing published for this version

0.16.215 Oct 2021

Nothing published for this version

0.16.17 May 2021

Nothing published for this version

0.16.04 May 2021

Nothing published for this version

0.15.229 Apr 2021

Nothing published for this version

0.15.17 Apr 2021

Nothing published for this version

0.15.04 Apr 2021

Nothing published for this version

0.14.128 Feb 2021

Nothing published for this version

0.14.025 Feb 2021

Nothing published for this version

0.13.128 Feb 2021

Nothing published for this version

0.13.019 Feb 2021

Nothing published for this version

0.12.04 Feb 2021

Nothing published for this version

0.11.320 Jan 2021

Nothing published for this version

0.11.219 Jan 2021withdrawn: malware test case

Nothing published for this version

0.11.18 Dec 2020withdrawn: malware test case

Nothing published for this version

0.11.03 Nov 2020withdrawn: malware test case

PPMd: Use stream encoder/decoder instead of buffered one.

Changed

PPMd: Use stream encoder/decoder instead of buffered one.
PPMd: Use ppmd-cffi@v0.3.1 and later.(#268)

Added

PPMd compression/decompression support.(#255)
New API to set methods to set header encode mode, encode or encrypted.(#259)
Support Python 3.9.(#261)
Support arm64/aarch64 architecture on Linux.(#262)

Fixed

Append mode cause error when target archive use LZMA2+BCJ.(#266)
Fix zstandard compression/decompression.(#258)

Deprecated

Drop support for python 3.5 which become end-of-life in Sept. 2020.

Open source →

0.11.0b318 Oct 2020pre-releasewithdrawn

Nothing published for this version

0.11.0b215 Oct 2020pre-releasewithdrawn

Nothing published for this version

0.11.0b113 Oct 2020pre-releasewithdrawn

Nothing published for this version

0.11.0a15 Oct 2020pre-releasewithdrawn

Nothing published for this version

Your coding agent can read these notes before it upgrades. Set up the MCP server →

py7zr

Release timeline

Releases

Security

Fixed

Changed

Security

Removed

Changed

Requirements

Security

Fixed

What's Changed in details

New Contributors

Requirements

Security

Fixed

What's Changed in details

New Contributors

Changed

Changed

Document

Changed

Fixed

Changed

Removed

Added

Deprecated

Changed

Changed

Changed

Added

Fixed

Changed

Document

What's Changed

New Contributors

Fixed

Added

Changed

py7zr

Navigation

Related Topics

Quick search

Donate/support

Fixed

Added

Changed

Fixed

Changed

Added

Fixed

Deprecated