`mjml`

Ecosystem:
npm

Package URL:
pkg:npm/mjml

Total PRs:
104 Dependabot PRs

Latest PR:
21 days ago

Unique Repositories:
46 repositories

Unique Repos (30 days):
4 repositories

Security Advisories

MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827

GHSA-45h5-66jx-r2wf CVE-2025-67898 MODERATE published 7 months ago • updated 10 days ago

MJML before 5.0.0-alpha.9 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue ex...

4.15.3 → 4.18.0 Minor PR

Open 21 days ago 1 comment

chore(deps): bump mjml and @types/mjml

KlangHaus/grundtone #40

4.18.0 → 5.4.0 Major PR

Open 24 days ago 3 comments

deps: bump mjml from 4.18.0 to 5.0.0 in /frontend

City-of-Helsinki/yjdh #4191

4.18.0 → 5.0.0 Major PR

Open 25 days ago 25 comments

chore(deps): bump the minor-and-patch group across 1 directory with 42 updates

jmorin-info/intranet #18

5.1.0 → 5.3.0 Minor PR

Closed 25 days ago 2 comments

chore(deps): bump the backend group across 1 directory with 10 updates

rodekruis/IBF-system #2749

4.18.0 → 5.3.0 Major PR

Closed about 1 month ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 38 updates

teacoder-team/backend #114

5.0.1 → 5.2.2 Minor PR

Closed about 2 months ago 1 comment

chore(deps): bump the npm-dependencies group across 1 directory with 6 updates

ShadowZ11/nestjs-pdf #55

5.2.1 → 5.2.2 Patch PR

Open 2 months ago 1 comment

Bump mjml from 4.18.0 to 5.2.2

pemontto/n8n-nodes-mjml #10

4.18.0 → 5.2.2 Major PR

Closed 2 months ago 1 comment

Bump mjml from 5.0.1 to 5.2.2 in /emails

josephlbarnett/quizzy #3083

5.0.1 → 5.2.2 Minor PR

Open 2 months ago 1 comment

chore(deps)(deps): bump mjml and @types/mjml

BRIX-ORG/BRIX-Server #50

4.18.0 → 5.2.1 Major PR

Closed 2 months ago 1 comment

chore(deps): bump the backend group across 1 directory with 5 updates

rodekruis/IBF-system #2715

4.18.0 → 5.1.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump mjml from 4.18.0 to 5.0.0

eliranRP/seald #65

4.18.0 → 5.0.0 Major PR

Open 3 months ago 1 comment

chore(deps): bump the version-update group across 1 directory with 8 updates

mertemr/mjml-server #16

4.18.0 → 5.1.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump mjml and @types/mjml

Attraccess/Attraccess #681

4.18.0 → 5.1.0 Major PR

Closed 3 months ago 1 comment

chore(deps): Bump mjml from 4.18.0 to 5.1.0

digital-technologies-teachers-aotearoa/ams #287

4.18.0 → 5.1.0 Major PR

Closed 3 months ago 1 comment

chore(deps): bump mjml from 4.18.0 to 5.0.0

mozilla/fxa #20413

4.18.0 → 5.0.0 Major PR

Closed 3 months ago 3 comments

deps: bump the production-dependencies group across 1 directory with 66 updates

Vincent-Holm-Drumgole/Aldwin #124

4.18.0 → 5.0.1 Major PR

Closed 3 months ago 3 comments

deps: bump the production-dependencies group across 1 directory with 65 updates

Vincent-Holm-Drumgole/Aldwin #121

4.18.0 → 5.0.1 Major PR

Closed 3 months ago 3 comments

chore(deps): bump the dependencies group across 1 directory with 67 updates

teacoder-team/backend #96

4.16.1 → 5.0.1 Major PR

Closed 3 months ago 1 comment

chore(deps): bump mjml from 4.18.0 to 5.0.0

grant-js/grant #96

4.18.0 → 5.0.0 Major PR

Open 3 months ago 1 comment

chore(deps): bump the backend group across 1 directory with 16 updates

rodekruis/IBF-system #2690

4.15.3 → 4.18.0 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the backend group across 1 directory with 17 updates

rodekruis/IBF-system #2686

4.15.3 → 4.18.0 Minor PR

Closed 3 months ago 1 comment

Bump the npm_and_yarn group across 6 directories with 27 updates

dporkka/dittofeed-customer-engagement #4

4.14.1 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 4 directories with 9 updates

phiberoptick/n8n #988

4.15.3 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 4 directories with 9 updates

phiberoptick/n8n #985

4.15.3 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 7 updates

gagan0123/monkeytype #10

4.15.0 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 3 directories with 7 updates

phiberoptick/n8n #974

4.15.3 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

Bump the npm_and_yarn group across 3 directories with 29 updates

dporkka/dittofeed-customer-engagement #2

4.14.1 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 5 directories with 12 updates

phiberoptick/n8n #964

4.15.3 → 4.18.0 Minor PR

Open 4 months ago 3 comments

build(deps): Bump the npm_and_yarn group across 6 directories with 11 updates

phiberoptick/n8n #951

4.15.3 → 4.18.0 Minor PR

Open 4 months ago 16 comments

build(deps): bump the npm_and_yarn group across 1 directory with 23 updates

SeedCompany/libs #87

4.15.3 → 4.18.0 Minor PR

Closed 4 months ago 1 comment

build(deps): bump the npm_and_yarn group across 6 directories with 18 updates

idgrou/n8n #34

4.15.3 → 4.18.0 Minor PR

Open 4 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 3 directories with 3 updates

phiberoptick/n8n #890

4.15.3 → 4.18.0 Minor PR

Closed 5 months ago 1 comment

chore(deps): Bump the npm_and_yarn group across 3 directories with 8 updates

ivan09069/n8n #89

4.15.3 → 4.18.0 Minor PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 25 updates

NatYou345/xen-orchestra #12

4.16.1 → 4.18.0 Minor PR

Open 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

NatYou345/xen-orchestra #10

4.16.1 → 4.18.0 Minor PR

Closed 5 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

SeedCompany/libs #82

4.15.3 → 4.18.0 Minor PR

Open 5 months ago 2 comments

chore(deps): bump the npm_and_yarn group across 4 directories with 23 updates

NatYou345/xen-orchestra #8

4.16.1 → 4.18.0 Minor PR

Closed 5 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 2 directories with 6 updates

gagan0123/monkeytype #2

4.15.0 → 4.18.0 Minor PR

Closed 5 months ago 1 comment

build(deps): bump the npm_and_yarn group across 1 directory with 21 updates

SeedCompany/libs #81

4.15.3 → 4.18.0 Minor PR

Closed 5 months ago 1 comment

Bump mjml from 4.17.1 to 4.18.0 in /backend/email_compiler

baserow/baserow #4632

4.17.1 → 4.18.0 Minor PR

Closed 6 months ago 2 comments

chore(deps):(deps): bump the npm_and_yarn group across 1 directory with 2 updates

xuanyiying/ai-ace-job #22

4.15.3 → 4.17.1 Minor PR

Open 7 months ago 1 comment

chore(deps): bump the backend group across 1 directory with 11 updates

rodekruis/IBF-system #2570

4.15.3 → 4.18.0 Minor PR

Closed 7 months ago 1 comment

chore(deps): bump the npm_and_yarn group across 1 directory with 6 updates

Attraccess/Attraccess #395

4.15.3 → 4.18.0 Minor PR

Open 7 months ago 6 comments

chore(deps): bump the backend group in /services/API-service with 10 updates

rodekruis/IBF-system #2559

4.15.3 → 4.18.0 Minor PR

Closed 7 months ago 1 comment

dev: bump the safe group across 1 directory with 14 updates

TheThingsNetwork/lorawan-stack #7786

4.17.1 → 4.18.0 Minor PR

Closed 7 months ago 2 comments

chore(deps): bump the dev-dependencies group across 1 directory with 53 updates

amercehic/asyncstand #207

4.15.3 → 4.18.0 Minor PR

Closed 7 months ago 3 comments

chore(deps): bump the backend group in /services/API-service with 10 updates

rodekruis/IBF-system #2538

4.15.3 → 4.18.0 Minor PR

Closed 8 months ago 1 comment

dev: bump the safe group with 13 updates

TheThingsNetwork/lorawan-stack #7782

4.17.1 → 4.18.0 Minor PR

Closed 8 months ago 1 comment

Bump mjml from 4.17.1 to 4.17.2

thombruce/thombruce.com #26

4.17.1 → 4.17.2 Patch PR

Closed 8 months ago 2 comments

Package Details

Name:	`mjml`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/mjml`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

MJML: the only framework that makes responsive-email easy

Repository:	https://github.com/mjmlio/mjml
Homepage:	https://mjml.io
Latest Release:	`4.15.3` over 2 years ago
Dependent Repos:	2,687
Dependent Packages:	374
Downloads:	3,588,881
Ranking:	Top 0.4142% by dependent repos Top 0.1753% by downloads Top 0.1467% by dependent pkgs

PR Status

Open 46 (44.2%)

Merged 8 (7.7%)

Closed 50 (48.1%)

PR Types

Major 15 (14.4%)

Minor 85 (81.7%)

Patch 4 (3.8%)

mjml

Security Advisories

MJML allows mj-include directory traversal due to an incomplete fix for CVE-2020-12827

MJML vulnerable to path traversal

Recent PRs

Package Details

Security Advisories

2

Package Information

PR Status

PR Types

`mjml`