Description
MJML before 5.0.0-alpha.9 allows mj-include directory traversal to test file existence and (in the type=”css” case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
Recommendation
Update the mjml package to the latest compatible version. Followings are version details:
- Affected version(s): < 5.0.0-alpha.9
- Patched version(s): 5.0.0-alpha.9
References
Could your website be exposed too?
SmartScanner can check your website for MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827 and gives you actionable findings to investigate.
Start a free scanRelated Issues
- MJML vulnerable to path traversal - CVE-2020-12827
- datatables.net vulnerable to Prototype Pollution due to incomplete fix - CVE-2020-28458
- Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Ax - CVE-2026-42043
- Mammoth is vulnerable to Directory Traversal - CVE-2025-11849
You might also like:
See something that needs correcting? Let us knowUpdated June 26, 2026