PyPI/mjml CVE-2024-26151: high 8.2

Potentially untrusted input is rendered as HTML in final output

Action: Upgrade mjml to 0.11.0 or later.

pip install mjml==0.11.0

Affected

Fixed versions

Sources

• osv: GHSA-578p-fxmm-6229
• https://github.com/FelixSchwarz/mjml-python/security/advisories/GHSA-578p-fxmm-6229
• https://nvd.nist.gov/vuln/detail/CVE-2024-26151
• https://github.com/FelixSchwarz/mjml-python/issues/52
• https://github.com/FelixSchwarz/mjml-python/commit/84c495da20a91640a1ca551ace17df7f3be644aa
• https://github.com/FelixSchwarz/mjml-python/commit/8d410b7a500703080bb14ed7e3d2663fe16767e6
• https://github.com/FelixSchwarz/mjml-python
• https://github.com/FelixSchwarz/mjml-python/releases/tag/v0.11.0

CVE-2024-26151 · published 2024-02-22T21:40:59Z · modified 2026-09-10T03:50:09.830349084Z · JSON