Description
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
References (1)
Scores
CVSS v3
4.5
EPSS
0.0002
EPSS Percentile
5.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-36
Status
published
Products (2)
MJML/MJML
< 4.18.0
npm/mjml
0npm
Published
Dec 14, 2025
Tracked Since
Feb 18, 2026