halo-dev vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20242
3. 20251
4. 20266

Newest CVEs

• CVE-2026-116117

  halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal

  halo-dev · halo

  Medium6.9
• CVE-2026-97182

  halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

  halo-dev · Halo

  Medium6.9
• CVE-2026-91772

  Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter

  halo-dev · halo

  Medium5.3
• CVE-2026-16088

  halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal

  halo-dev · halo

  Medium5.1
• CVE-2026-15326

  halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal

  halo-dev · halo

  Medium5.1
• CVE-2026-55439

  Halo: Path Traversal in Backup Download Leads to Arbitrary File Read

  halo-dev · halo

  Medium5.5
• CVE-2024-56156

  Halo Vulnerable to Stored XSS and RCE via File Upload Bypass

  halo-dev · halo

  Medium5.5
• CVE-2024-43793

  Halo's editor has a stored XSS vulnerability

  halo-dev · halo

  Medium6.3
• CVE-2024-43792

  Halo's editor has a stored Cross-Site Scripting vulnerability

  halo-dev · halo

  Medium6.3
• CVE-2022-22125

  Halo CMS - Stored Cross-Site Scripting (XSS) in Article's Tag

  halo-dev · halo

  Medium4.8