Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

net.sf.mpxj:mpxj

6 known vulnerabilities (1 critical, 1 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 1 high, 3 medium, 1 low
Dependents
0
Registry
Maven Central

Advisories 6

  • MPXJ: XXE Vulnerability in MerlinReader

    Affected: from 5.5.5, fixed in 16.4.1.

  • CVE-2026-65829Medium 5.3

    MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

    Affected: from 7.3.0, fixed in 16.5.0.

  • CVE-2024-49771Medium 5.3

    MPXJ has a Potential Path Traversal Vulnerability

    Affected: from 8.3.5, fixed in 13.5.1.

  • Temporary File Information Disclosure Vulnerability

    Affected: fixed in 10.14.1.

  • CVE-2020-35460Medium 5.3

    common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the…

    Affected: fixed in 8.3.5.

  • CVE-2020-25020Critical 9.8

    MPXJ through 8.1.3 allows XXE attacks.

    Affected: fixed in 8.1.4.