hwp2md parses binary file formats (HWP 5.0) and ZIP archives (HWPX), which are security-sensitive operations. If you discover a security vulnerability, please report it responsibly.
Email: kjc0210@gmail.com
Please include:
- Description of the vulnerability
- Steps to reproduce
- A sample file that triggers the issue (if applicable)
We will acknowledge your report within 48 hours and aim to provide a fix within 7 days for critical issues.
| Package | Version | Supported |
|---|---|---|
| Python (PyPI) | 1.0.x | Yes |
| JavaScript (npm) | 0.1.x | Yes |
- Binary parsing: HWP 5.0 files are OLE Compound Files with compressed streams. Malformed files could potentially cause issues.
- ZIP handling: HWPX files are ZIP archives. We use standard library ZIP handling with size limits.
- No code execution: hwp2md only reads and converts document content. It does not execute macros or embedded scripts.