| Package | Affected versions | Patched versions |
|---|---|---|
| whale | < 3.12.129.18 | 3.12.129.18 |
Whale browser before 3.12.129.18 allowed extensions to replace JavaScript files of the HWP viewer website which could access to local HWP files. When the HWP files were opened, the replaced script could read the files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free