Vulnerabilities

TI-2026-44114 CVE-2026-61570 · GHSA-5vvx-3h34-f3gj

MPXJ: XXE Vulnerability in MerlinReader

LOW 39

MPXJ is an open source library to read and write project plans from a variety of file formats and databases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00474 Published 2026-09-22 Fixed in 16.4.1 CWE-611

TI-2026-46908 CVE-2026-65829 · GHSA-7952-gx68-cjqr

LOW 30

MPXJ is an open source library to read and write project plans from a variety of file formats and databases.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00429 Published 2026-09-22 Fixed in 16.5.0 CWE-22

TI-2024-33238 CVE-2024-49771 · GHSA-j945-c44v-97g6

LOW 31

MPXJ is an open source library to read and write project plans from a variety of file formats and databases.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00481 Published 2024-10-28 Fixed in 13.5.1 CWE-22