mpxj
Primary repository for MPXJ library
View on Github
Activity
- Latest release
- 1mo ago
- Total releases
- 251
- Cadence
- ~14 days
- Last 12 months
- 17
Reach
- Stars
- 339
Details
- License
- unknown
- First release
- Mar 17, 2015
| Version | Released | |
|---|---|---|
16.7.0
minor
| ||
16.6.0
minor
| ||
16.5.0
minor
| ||
16.4.1
patch
| ||
16.4.0
minor
| ||
16.3.0
minor
| ||
16.2.0
minor
| ||
16.1.0
minor
| ||
16.0.0
major
| ||
15.3.1
patch
| ||
15.3.0
minor
| ||
15.2.0
minor
| ||
15.1.0
minor
| ||
15.0.0
major
| ||
14.5.2
patch
| ||
14.5.1
patch
| ||
14.5.0
minor
| ||
14.4.0
minor
| ||
14.3.5
patch
| ||
14.3.4
patch
| ||
14.3.3
patch
| ||
14.3.2
patch
| ||
14.3.1
patch
| ||
14.3.0
minor
| ||
14.2.0
minor
| ||
14.1.0
minor
| ||
14.0.0
major
| ||
13.12.0
minor
| ||
13.11.0
minor
| ||
13.10.0
minor
| ||
13.9.0
minor
| ||
13.8.0
minor
| ||
13.7.0
minor
| ||
13.6.0
minor
| ||
13.5.1
patch
| ||
13.5.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.4.1
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.4.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.3.1
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.3.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.2.1
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.2.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.1.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.2
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.1
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
13.0.0
major
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.3
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.2
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.1
patch
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev | ||
12.10.0
minor
1 CVE
CVE-2024-49771
GHSA-j945-c44v-97g6
PYSEC-2026-1681
Oct 28, 2024
MPXJ has a Potential Path Traversal Vulnerability
Medium
Adjacent
Low
None
None
ImpactThe patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations. PatchesThe issue is addressed in MPXJ version 13.5.1 WorkaroundsDo not pass zip files to MPXJ. ReferencesN/A CreditsIssue report and patch provided by yyjLF and sprinkle Affected versions
10.0.0
10.0.1
10.0.2
10.0.3
10.0.4
10.0.5
10.1.0
10.10.0
10.11.0
10.12.0
10.13.0
10.14.0
+ 87 more Show less
10.14.1
10.15.0
10.16.0
10.16.1
10.16.2
10.2.0
10.3.0
10.4.0
10.5.0
10.6.0
10.6.1
10.6.2
10.7.0
10.8.0
10.9.0
10.9.1
11.0.0
11.1.0
11.2.0
11.3.0
11.3.1
11.3.2
11.4.0
11.5.0
11.5.1
11.5.2
11.5.3
11.5.4
12.0.0
12.0.1
12.0.2
12.1.0
12.1.1
12.1.2
12.1.3
12.10.0
12.10.1
12.10.2
12.10.3
12.2.0
12.3.0
12.4.0
12.5.0
12.6.0
12.7.0
12.8.0
12.8.1
12.9.0
12.9.1
12.9.2
12.9.3
13.0.0
13.0.1
13.0.2
13.1.0
13.2.0
13.2.1
13.3.0
13.3.1
13.4.0
13.4.1
13.5.0
8.3.5
8.4.0
8.5.0
8.5.1
9.0.0
9.1.0
9.2.0
9.2.1
9.2.2
9.2.3
9.2.4
9.2.5
9.2.6
9.3.0
9.3.1
9.4.0
9.5.0
9.5.1
9.5.2
9.6.0
9.7.0
9.8.0
9.8.1
9.8.2
9.8.3
Fixed in
13.5.1
References
Updated Jul 07, 2026 · Source: OSV.dev |