CVE-2025-67898
Medium · 4.5CVSS
4.5
EPSS
0.3%
Published
Dec 14, 2025
CISA due date
—
The record
MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | mjml | 0 | No fix |
Related vulnerabilities
- GHSA-45h5-66jx-r2wf MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827 Same vulnerability
- CVE-2026-68487 Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an… CWE-36
- CVE-2026-88288 GeoVision GV-LPC2211 V1.13 fails to restrict the filename supplied to BKDownloadLink.cgi… CWE-36
- CVE-2026-47606 NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could… CWE-36
- CVE-2026-47243 Kata Containers is an open source project focusing on a standard implementation of… CWE-36
- CVE-2026-54202 Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traversal vulnerability… CWE-36
- CVE-2026-13346 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files… CWE-36
- CVE-2026-57211 RabbitMQ is a messaging and streaming broker. CWE-36