mpxj vulnerabilities
CVEs whose affected-version data names the mpxj package (maven, nuget). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-65829Medium· 5.3MPXJ is an open source library to read and write project plans from a variety of file formats and databases
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbit…
▾ SunlitMPXJ · MPXJ.Netvia NVD
CVE-2026-61570High· 7.5MPXJ is an open source library to read and write project plans from a variety of file formats and databases
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS …
▾ Twilightsf · net.sf.mpxj:mpxjvia NVD
CVE-2024-49771Medium· 5.3MPXJ has a Potential Path Traversal Vulnerability
MPXJ has a Potential Path Traversal Vulnerability
▾ Sunlitsf · net.sf.mpxj:mpxjEPSS 0.48%via OSV