Skip to content
OpenAdvisories

Product · edwardkim

rhwp

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-54565

    rhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pages

    rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the browser extensions use an all-URLs host permission to detect HWP and HWPX links on visited pages, but the service worke…

    edwardkim rhwp