<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: halo</title><description>Every new CVE for halo.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116117: halo-dev halo View Name Resolver DefaultViewNameResolver.java path traversal</title><link>https://agentprime.io/advisories/CVE-2026-116117/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116117/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 04:15:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-97182: halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization</title><link>https://agentprime.io/advisories/CVE-2026-97182/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-97182/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Sep 2026 12:00:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-91772: Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter</title><link>https://agentprime.io/advisories/CVE-2026-91772/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-91772/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Sep 2026 01:20:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16088: halo-dev halo Files Backup Endpoint MigrationEndpoint.java download path traversal</title><link>https://agentprime.io/advisories/CVE-2026-16088/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16088/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 Jul 2026 09:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15326: halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path traversal</title><link>https://agentprime.io/advisories/CVE-2026-15326/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15326/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 10 Jul 2026 03:15:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-55439: Halo: Path Traversal in Backup Download Leads to Arbitrary File Read</title><link>https://agentprime.io/advisories/CVE-2026-55439/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-55439/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Jun 2026 15:57:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15141: Halo Configuration actuator information disclosure</title><link>https://agentprime.io/advisories/CVE-2025-15141/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15141/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 28 Dec 2025 15:02:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56156: Halo Vulnerable to Stored XSS and RCE via File Upload Bypass</title><link>https://agentprime.io/advisories/CVE-2024-56156/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56156/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 25 Apr 2025 15:08:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-43793: Halo&apos;s editor has a stored XSS vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-43793/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43793/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Sep 2024 14:37:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-43792: Halo&apos;s editor has a stored Cross-Site Scripting vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-43792/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43792/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Sep 2024 16:15:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22125: Halo CMS - Stored Cross-Site Scripting (XSS) in Article&apos;s Tag</title><link>https://agentprime.io/advisories/CVE-2022-22125/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22125/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jan 2022 16:45:17 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22124: Halo CMS - Stored Cross-Site Scripting (XSS) in Profile Image</title><link>https://agentprime.io/advisories/CVE-2022-22124/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22124/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jan 2022 16:45:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-22123: Halo CMS - Stored Cross-Site Scripting (XSS) in Article&apos;s Title</title><link>https://agentprime.io/advisories/CVE-2022-22123/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-22123/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 13 Jan 2022 16:45:14 GMT</pubDate><category>CVE</category></item></channel></rss>