CVE-2026-5346 huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgery

[
  {
    "vendor": "huimeicloud",
    "product": "hm_editor",
    "versions": [
      {
        "version": "2.2.0",
        "status": "affected"
      },
      {
        "version": "2.2.1",
        "status": "affected"
      },
      {
        "version": "2.2.2",
        "status": "affected"
      },
      {
        "version": "2.2.3",
        "status": "affected"
      }
    ],
    "modules": [
      "image-to-base64 Endpoint"
    ]
  }
]