{"action":"Upgrade mpxj to 10.14.1 or later.","affected":[{"fixed":"10.14.1","introduced":"0"}],"component":"mpxj","cve_ids":["CVE-2022-41954"],"ecosystem":"PyPI","epss":0.00214,"exploited":false,"fixed_versions":["10.14.1"],"ghsa_id":"GHSA-jf2p-4gqj-849g","id":"tcs_01M5KGHAWFGSZ829WKR36CSZ50","modified_at":"2023-11-08T04:10:36.916085Z","published_at":"2022-11-25T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-42996","https://github.com/joniles/mpxj/security/advisories/GHSA-jf2p-4gqj-849g","https://github.com/joniles/mpxj/commit/287ad0234213c52b0638565e14bd9cf3ed44cedd"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-42996","url":"https://osv.dev/vulnerability/PYSEC-2022-42996"}],"summary":"MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `File.createTempFile(."}