CVE-2026-61570
3 advisories.
RubyGems/mpxj CVE-2026-61570: high 7.5
MPXJ: XXE Vulnerability in MerlinReader
Action: Upgrade mpxj to 16.4.1 or later.
bundle update mpxjAffected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.5 | 16.4.1 | - |
Fixed versions
| 16.4.1 |
Sources
- osv: GHSA-5vvx-3h34-f3gj
- https://github.com/joniles/mpxj/security/advisories/GHSA-5vvx-3h34-f3gj
- https://github.com/joniles/mpxj/commit/6e8288bc4d1cd62842af298004dc74fe66fb0805
- https://github.com/joniles/mpxj
- https://github.com/joniles/mpxj/releases/tag/v16.4.1
CVE-2026-61570 · published · modified · JSON
PyPI/mpxj CVE-2026-61570: high 7.5
MPXJ: XXE Vulnerability in MerlinReader
Action: Upgrade mpxj to 16.4.1 or later.
pip install mpxj==16.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.5 | 16.4.1 | - |
Fixed versions
| 16.4.1 |
Sources
- osv: GHSA-5vvx-3h34-f3gj#PyPI/mpxj
- https://github.com/joniles/mpxj/security/advisories/GHSA-5vvx-3h34-f3gj
- https://github.com/joniles/mpxj/commit/6e8288bc4d1cd62842af298004dc74fe66fb0805
- https://github.com/joniles/mpxj
- https://github.com/joniles/mpxj/releases/tag/v16.4.1
CVE-2026-61570 · published · modified · JSON
PyPI/mpxj CVE-2026-61570: high 7.5
MPXJ: XXE Vulnerability in MerlinReader
Action: Upgrade mpxj to 16.4.1 or later.
pip install mpxj==16.4.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.5 | 16.4.1 | - |
Fixed versions
| 16.4.1 |
Sources
- osv: PYSEC-2026-4107
- https://github.com/joniles/mpxj/security/advisories/GHSA-5vvx-3h34-f3gj
- https://github.com/joniles/mpxj/commit/6e8288bc4d1cd62842af298004dc74fe66fb0805
- https://github.com/joniles/mpxj
- https://github.com/joniles/mpxj/releases/tag/v16.4.1
- https://pypi.org/project/mpxj
- https://github.com/advisories/GHSA-5vvx-3h34-f3gj
- https://nvd.nist.gov/vuln/detail/CVE-2026-61570
CVE-2026-61570 · published · modified · JSON