CVE-2025-67898

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

Score

CVSS 3.1 4.5 Medium

Status

Deferred - cve@mitre.org

Published

2025-12-14

Last modified

2026-10-14

Weaknesses

CWE-36

Affected products

• Mjml (Mjml)

References

• https://github.com/mjmlio/mjml/issues/3018