Skip to content
OpenAdvisories

Product · FelixSchwarz

mjml-python

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Potentially untrusted input is rendered as HTML in final output

    The `mjml` PyPI package, found at the `FelixSchwarz/mjml-python` GitHub repo, is an unofficial Python port of MJML, a markup language created by Mailjet. All users of `FelixSchwarz/mjml-python` who insert untrusted data into mjml templates unless that data is…