Skip to content
OpenAdvisories

Package · npm

mjml

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 4.5
    CVE-2025-67898

    MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827

    MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

    MJML MJML mjml npm
  • High 7.2
    CVE-2020-12827

    MJML vulnerable to path traversal

    MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.

    mjml npm