~ / search / GHSA-4hch-r9xf-6vfr

GHSA-4hch-r9xf-6vfr

MJML vulnerable to path traversal

Source: GitHub Advisory Database (reviewed) High CVE-2020-12827

Packages

EcosystemPackageAffectedFixed in
npm mjml < 4.6.3 4.6.3

Details

As written in the advisory (Markdown source, shown as plain text).

MJML prior to 4.6.3 contains a path traversal vulnerability when processing the `mj-include` directive within an MJML document.

References

External links from the advisory. They lead to third-party sites.