mpxj
Primary repository for MPXJ library
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 130
- Cadence
- ~14 days
- Last 12 months
- 17
Reach
- Stars
- 339
Details
- License
- unknown
- First release
- Mar 07, 2021
| Version | Released | |
|---|---|---|
16.7.0
minor
| ||
16.6.0
minor
| ||
16.5.0
minor
| ||
16.4.1
patch
| ||
16.4.0
minor
| ||
16.3.0
minor
| ||
16.2.0
minor
| ||
16.1.0
minor
| ||
16.0.0
major
| ||
15.3.1
patch
| ||
15.3.0
minor
| ||
15.2.0
minor
| ||
15.1.0
minor
| ||
15.0.0
major
| ||
14.5.2
patch
| ||
14.5.1
patch
| ||
14.5.0
minor
| ||
14.4.0
minor
| ||
14.3.5
patch
| ||
14.3.4
patch
| ||
14.3.3
patch
| ||
14.3.2
patch
| ||
14.3.1
patch
| ||
14.3.0
minor
| ||
14.2.0
minor
| ||
14.1.0
minor
| ||
14.0.0
major
| ||
13.12.0
minor
| ||
13.11.0
minor
| ||
13.10.0
minor
| ||
13.9.0
minor
| ||
13.8.0
minor
| ||
13.7.0
minor
| ||
13.6.0
minor
| ||
13.5.1
patch
| ||
13.5.0
minor
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.4.2
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.4.1
patch
| ||
13.4.0
minor
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.3.1
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.3.0
minor
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.2.1
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.2.0
minor
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.1.0
minor
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.2
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.1
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.0
major
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.3
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.2
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.1
patch
1 CVE
CVE-2024-49771
PYSEC-2026-1681
GHSA-j945-c44v-97g6
Jul 07, 2026
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 83 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.4.2
13.5.0
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev |