mautic/grapes-js-builder-bundle
GrapesJS HTML and MJML integration for Mautic
View on Github
Activity
- Latest release
- 5d ago
- Total releases
- 47
- Cadence
- ~34 days
- Last 12 months
- 12
Reach
- Stars
- 57
Details
- First release
- May 18, 2021
| Version | Released | |
|---|---|---|
7.2.0-rc2
pre
| ||
7.1.3
patch
| ||
7.2.0-rc
pre
| ||
7.1.2
patch
| ||
6.0.9
patch
| ||
5.2.11
patch
| ||
7.1.1
patch
| ||
7.1.0
minor
| ||
7.1.0-rc
pre
| ||
7.0.2
major
| ||
6.0.8
patch
| ||
5.2.10
patch
| ||
7.0.0-rc
pre
| ||
6.0.6
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.2.8
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
6.0.2
major
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
6.0.0-rc
pre
| ||
5.2.6
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
6.0.0-alpha
pre
| ||
5.2.3
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.2.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.2.0
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.1.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.1.0
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.4.13
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.0.4
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.0.3
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.0.1
major
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
5.0.0-rc1
pre
| ||
5.0.0-beta2
pre
| ||
5.0.0-alpha1
pre
| ||
4.4.11
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.4.5
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.4.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.4.0
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.3.1
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.2.2
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.2.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.2.0
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.1.2
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.1.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.1
minor
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.0.1
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.0.2
patch
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.0.0
initial
1 CVE
CVE-2025-13827
GHSA-5xw2-57jx-pgjp
Dec 02, 2025
GrapesJsBuilder File Upload allows all file uploads
High
Network
Low
Low
SummaryArbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Affected versions
4.0.0
4.0.1
4.0.2
4.1
4.1.1
4.1.2
4.2.0
4.2.0-rc
4.2.0-rc1
4.2.1
4.2.2
4.3.0
+ 41 more Show less
4.3.0-beta
4.3.0-rc
4.3.1
4.4.0
4.4.0-beta
4.4.1
4.4.10
4.4.11
4.4.12
4.4.13
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9
5.0.0
5.0.1
5.0.2
5.0.3
5.0.4
5.1.0
5.1.1
5.2.0
5.2.1
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
Fixed in
4.4.18
5.2.9
6.0.7
References Updated Dec 02, 2025 · Source: OSV.dev | ||
4.0.0-rc
pre
| ||
4.0.0-beta
pre
|