Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-44593
6.1
MEDIUMCVSS v3
Published
September 9, 2025
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13
halo-dev/halo
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。
GitHubHalo 是一款强大易用的开源建站工具，从个人博客、知识库，到企业官网、在线商城，Halo 都能助您轻松实现，一站式满足您的多样化建站需求。< 2.20.13NVD