Skip to content
OpenAdvisories

Vendor

huimeicloud

1 known vulnerabilities.

Products

hm_editor 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-5346

    huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgery

    A vulnerability was determined in huimeicloud hm_editor up to 2.2.3. Impacted is the function client.get of the file src/mcp-server.js of the component image-to-base64 Endpoint. Executing a manipulation of the argument url can lead to server-side request forg…

    huimeicloud hm_editor