Executive brief
MPXJ has a Potential Path Traversal Vulnerability
Affected products
- RubyGems mpxj
- NuGet MPXJ.Net
- NuGet net.sf.mpxj
- NuGet net.sf.mpxj-for-csharp
- NuGet net.sf.mpxj-for-vb
- Maven net.sf.mpxj:mpxj
- PyPI mpxj
Junglewise Threat Intelligence
CVE-2024-49771: PYSEC-2026-1681 - MPXJ has a Potential Path Traversal Vulnerability
CVE-2024-49771 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: mpxj (RubyGems), MPXJ.Net (NuGet), net.sf.mpxj (NuGet), net.sf.mpxj-for-csharp (NuGet), net.sf.mpxj-for-vb (NuGet), net.sf.mpxj:mpxj (Maven). Vendors: RubyGems, NuGet, Maven, PyPI.
Related threats
- MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, readin
- MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, Merlin
- PYSEC-2022-42996 - MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems
- Improper Restriction of XML External Entity Reference in MPXJ
- MPXJ path Traversal vulnerability