Skip to content
OpenAdvisories

Package · PyPI

mpxj

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2026-61570

    MPXJ: XXE Vulnerability in MerlinReader

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS column of a Merlin pro…

    joniles mpxj net.sf.mpxj:mpxj net.sf.mpxj-for-csharp Maven PyPI NuGet RubyGems
  • Medium 5.3
    CVE-2026-65829

    MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the …

    joniles mpxj net.sf.mpxj:mpxj net.sf.mpxj Maven PyPI NuGet RubyGems
  • Medium 5.3
    CVE-2024-49771

    MPXJ has a Potential Path Traversal Vulnerability

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constru…

    joniles mpxj net.sf.mpxj:mpxj net.sf.mpxj-for-csharp Maven PyPI NuGet RubyGems
  • Low 3.3
    CVE-2022-41954

    Temporary File Information Disclosure Vulnerability

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(..)` results in temporary files being created with the permi…

    joniles mpxj net.sf.mpxj:mpxj net.sf.mpxj-for-csharp Maven PyPI NuGet