← Back

Mjml

mjml

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Mjml
mjml
Mjml App
mjml_app

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mjml
1Mjml App
Jun 17, 2026
Mar 1, 2024
N/A· v4
9.3 CRITICAL· v3
N/A· v2
mjml-app versions 3.0.4 and 3.1.0-beta were discovered to contain a remote code execution (RCE) via the href attribute.
1Mjml
1Mjml
Jun 17, 2026
Jun 17, 2020
N/A· v4
7.2 HIGH· v3
6.4 MEDIUM· v2
MJML prior to 4.6.3 contains a path traversal vulnerability when processing the mj-include directive within an MJML document.