diff --git a/pkgs/os-specific/linux/jfbview/default.nix b/pkgs/os-specific/linux/jfbview/default.nix
deleted file mode 100644
index eb61ff9d5130..000000000000
--- a/pkgs/os-specific/linux/jfbview/default.nix
+++ /dev/null
@@ -1,73 +0,0 @@
-{ lib, stdenv, fetchFromGitHub
-, freetype, harfbuzz, jbig2dec, libjpeg, libX11, mupdf_1_17, ncurses, openjpeg
-, openssl
-
-, imageSupport ? true, imlib2 ? null }:
-
-let
-  package = if imageSupport
-    then "jfbview"
-    else "jfbpdf";
-  binaries = if imageSupport
-    then [ "jfbview" "jpdfcat" "jpdfgrep" ] # all require imlib2
-    else [ "jfbpdf" ]; # does not
-in
-
-stdenv.mkDerivation rec {
-  pname = package;
-  version = "0.5.7";
-
-  src = fetchFromGitHub {
-    repo = "JFBView";
-    owner = "jichu4n";
-    rev = version;
-    sha256 = "0ppns49hnmp04zdjw6wc28v0yvz31rkzvd5ylcj7arikx20llpxf";
-  };
-
-  postPatch = ''
-    substituteInPlace main.cpp \
-      --replace "<stropts.h>" "<sys/ioctl.h>"
-  '';
-
-  hardeningDisable = [ "format" ];
-
-  buildInputs = [
-    freetype harfbuzz jbig2dec libjpeg libX11 mupdf_1_17 ncurses openjpeg
-    openssl
-  ] ++ lib.optionals imageSupport [
-    imlib2
-  ];
-
-  configurePhase = ''
-    # Hack. Probing (`ldconfig -p`) fails with ‘cannot execute binary file’.
-    # Overriding `OPENJP2 =` later works, but makes build output misleading:
-    substituteInPlace Makefile --replace "ldconfig -p" "echo libopenjp2"
-
-    make config.mk
-  '';
-
-  buildFlags = binaries;
-  enableParallelBuilding = true;
-
-  installPhase = ''
-    mkdir -p $out/bin
-    install ${toString binaries} $out/bin
-  '';
-
-  meta = with lib; {
-    description = "PDF and image viewer for the Linux framebuffer";
-    longDescription = ''
-      A very fast PDF and image viewer for the Linux framebuffer with some
-      advanced and unique features, including:
-      - Reads PDFs (MuPDF) and common image formats (Imlib2)
-      - Supports arbitrary zoom (10% - 1000%) and rotation
-      - Table of Contents (TOC) viewer for PDF documents
-      - Multi-threaded rendering on multi-core machines
-      - Asynchronous background rendering of the next page
-      - Customizable multi-threaded caching
-    '';
-    homepage = "https://seasonofcode.com/pages/jfbview.html";
-    license = licenses.asl20;
-    platforms = platforms.linux;
-  };
-}
diff --git a/pkgs/top-level/aliases.nix b/pkgs/top-level/aliases.nix
index 3969dc57923d..4c31867174f6 100644
--- a/pkgs/top-level/aliases.nix
+++ b/pkgs/top-level/aliases.nix
@@ -768,6 +768,8 @@ mapAliases ({
   jbuilder = throw "'jbuilder' has been renamed to/replaced by 'dune_1'"; # Converted to throw 2022-02-22
   jd = throw "jd has been dropped due to the lack of maintenance from upstream since 2016"; # Added 2022-06-03
   jellyfin_10_5 = throw "Jellyfin 10.5 is no longer supported and contains a security vulnerability. Please upgrade to a newer version"; # Added 2021-04-26
+  jfbpdf = throw "'jfbpdf' has been removed, because it depends on an outdated and insecure version of mupdf"; # Added 2023-06-27
+  jfbview = throw "'jfbview' has been removed, because it depends on an outdated and insecure version of mupdf"; # Added 2023-06-27
   jira-cli = throw "jira-cli was removed because it is no longer maintained"; # Added 2023-02-28
   joseki = throw "'joseki' has been renamed to/replaced by 'apache-jena-fuseki'"; # Converted to throw 2022-02-22
   journalbeat = throw "journalbeat7 has been removed upstream. Use filebeat with the journald input instead"; # Added 2022-10-04
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 8a20236eb045..934ce3c8e2f5 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -27264,13 +27264,6 @@ with pkgs;
 
   iwd = callPackage ../os-specific/linux/iwd { };
 
-  jfbview = callPackage ../os-specific/linux/jfbview {
-    imlib2 = imlib2Full;
-  };
-  jfbpdf = jfbview.override {
-    imageSupport = false;
-  };
-
   jool-cli = callPackage ../os-specific/linux/jool/cli.nix { };
 
   juju = callPackage ../applications/networking/juju { };