Skip to content

PatchFirst · Latest vulnerabilities

mjml vulnerabilities

Vulnerabilities published for mjml in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 2

CVE-2025-67898
Medium · CVSS 4.5EPSS 0.26%Fix available
CVE-2025-67898
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
mjml Node.js
- Update to 5.0.0-alpha.9
Published December 14, 2025Updated December 15, 2025
Source advisory 1 ↗Source advisory 2 ↗
CVE-2020-12827
High · CVSS 7.2EPSS 2.66%Fix available
CVE-2020-12827
MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.
mjml Node.js
- Update to 4.6.3
Published June 17, 2020Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →