Skip to content
OpenAdvisories

Vendor

halo-dev

12 known vulnerabilities.

Products

Halo 12
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.3
    CVE-2026-116117

    halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal

    A flaw has been found in halo-dev halo up to 2.27.0-beta.1. Affected by this vulnerability is the function run.halo.app.theme.DefaultViewNameResolver.resolveViewNameOrDefault of the file application/src/main/java/run/halo/app/theme/DefaultViewNameResolver.jav…

    halo-dev Halo
  • High 7.3
    CVE-2026-97182

    halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization

    A security vulnerability has been detected in halo-dev Halo up to 2.25.4/2.26.1. Affected is an unknown function of the file application/src/main/java/run/halo/app/content/comment/ReplyNotificationSubscriptionHelper.java of the component SpEL Handler. Such ma…

    halo-dev Halo