Vulnerabilidades de MJML

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de MJML: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-67898 Média · 4.5 CWE-36 14/12/2025

MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

CVE-2020-12827 Alta · 7.2 CWE-22 17/06/2020

MJML vulnerable to path traversal

MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.