mpxj vulnerabilities

1 known vulnerability in mpxj from Joniles. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  mpxj: Improper Restriction of XML External Entity Reference

  CVE-2026-61570Sep 22, 2026Joniles

  MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, MerlinReader creates a DocumentBuilder with default settings while parsing XML from the ZTIMEINTERVALS column of a Merlin proj