Skip to content
OpenAdvisories

Vendor

halo-dev

12 known vulnerabilities.

Products

Halo 12
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.8
    CVE-2026-15326

    halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal

    A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the file ThemeUtils.java of the component Theme Installation. Such manipulation of the argument metadata.name leads to path traversal. The attac…

    halo-dev Halo