CVE-2025-70886高危 7.5An issue in halo v.2.22.4 and before allows a remote attacker to cause a denial of service via a crafted payload to the public comment submi…
CVE-2025-15141低危 3.1A vulnerability was determined in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Conf…
CVE-2025-44595中危 6.1Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}.
CVE-2025-44593中危 6.1Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html f…
CVE-2025-44594严重 9.1halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-…