net.sf.mpxj:mpxj vulnerabilities
CVEs whose affected-version data names the net.sf.mpxj:mpxj package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-61570High· 7.5MPXJ is an open source library to read and write project plans from a variety of file formats and databases
MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS …
▾ Twilightsf · net.sf.mpxj:mpxjEPSS 0.35%via NVD
CVE-2024-49771Medium· 5.3MPXJ has a Potential Path Traversal Vulnerability
MPXJ has a Potential Path Traversal Vulnerability
▾ Sunlitsf · net.sf.mpxj:mpxjEPSS 0.48%via OSV