CVE-2024-26151
2 advisories.
PyPI/mjml CVE-2024-26151: high 8.2
Potentially untrusted input is rendered as HTML in final output
Action: Upgrade mjml to 0.11.0 or later.
pip install mjml==0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: GHSA-578p-fxmm-6229
- https://github.com/FelixSchwarz/mjml-python/security/advisories/GHSA-578p-fxmm-6229
- https://nvd.nist.gov/vuln/detail/CVE-2024-26151
- https://github.com/FelixSchwarz/mjml-python/issues/52
- https://github.com/FelixSchwarz/mjml-python/commit/84c495da20a91640a1ca551ace17df7f3be644aa
- https://github.com/FelixSchwarz/mjml-python/commit/8d410b7a500703080bb14ed7e3d2663fe16767e6
- https://github.com/FelixSchwarz/mjml-python
- https://github.com/FelixSchwarz/mjml-python/releases/tag/v0.11.0
CVE-2024-26151 · published · modified · JSON
PyPI/mjml CVE-2024-26151: high 8.2
Potentially untrusted input is rendered as HTML in final output
Action: Upgrade mjml to 0.11.0 or later.
pip install mjml==0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: PYSEC-2026-1631
- https://github.com/FelixSchwarz/mjml-python/security/advisories/GHSA-578p-fxmm-6229
- https://nvd.nist.gov/vuln/detail/CVE-2024-26151
- https://github.com/FelixSchwarz/mjml-python/issues/52
- https://github.com/FelixSchwarz/mjml-python/commit/84c495da20a91640a1ca551ace17df7f3be644aa
- https://github.com/FelixSchwarz/mjml-python/commit/8d410b7a500703080bb14ed7e3d2663fe16767e6
- https://github.com/FelixSchwarz/mjml-python
- https://github.com/FelixSchwarz/mjml-python/releases/tag/v0.11.0
- https://pypi.org/project/mjml
- https://github.com/advisories/GHSA-578p-fxmm-6229
CVE-2024-26151 · published · modified · JSON