EUVD-2025-23648

Malicious code in bioql PyPI...

CVE-2025-51857

The Halo website builder (v.2.20.18LTS and earlier) is vulnerable to Cross-Site Scripting (XSS) attacks. The root cause is located in the reconcile method of the AttachmentReconciler class , where input is not properly neutralized during web page generation. This vulnerability allows for potentia...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...