Skip to content
OpenAdvisories

Vendor

HeliumEdu

2 known vulnerabilities.

Products

platform 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-55875

    Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network

    Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url…

    HeliumEdu platform