halo

halo 2.26.1 · pkgs/by-name/ha/halo/package.nix

Health

Risk

risk 37 high

+20 2 open advisories
+8 NIXPKGS-2026-2610 has a public exploit (CISA)
+8 2.26.1 is behind upstream 2.27.0
+1 no versionCheckHook

Version

2.26.1 upstream 2.27.0

Channels

master 2.26.1 · nixos-unstable 2.26.1 · nixos-26.05 2.24.2 master is ahead of nixos-26.05

Hydra

succeeded 2d ago

Advisories

NIXPKGS-2026-2003 medium 5.5 public exploit EPSS 0.5% Halo: Path Traversal in Backup Download Leads to Arbitrary File Read · #535591

CVE-2026-55439

NIXPKGS-2026-2610 medium 6.1 public exploit EPSS 0.3% Halo through 2.26.1 Open Redirect via Unvalidated URI Parameter · #563869

CVE-2026-91772

Packaging

no versionCheckHook

Packagewhat each field means

Description

Self-hosted dynamic blogging program

Homepage

https://www.halo.run

License

GPL-3.0-only

Platforms

2 platforms: Linux

Main program

halo

Source provenance

binaryBytecode

Outputs

out

Status

not broken, not insecure, free

Position

pkgs/by-name/ha/halo/package.nix:66

Maintainers

wangxiaoerYah

Version bumps 1all open bumps

halo: 2.26.1 -> 2.27.0

#573968 by r-ryantm · opened 2d ago · checks pass

Pull requests 1

halo: 2.26.1 -> 2.27.0

#573968 by r-ryantm · opened 2d ago · checks pass

Closed or merged in the synced window 1

halo: 2.25.4 -> 2.26.1

#552665 by r-ryantm · merged 5w ago

Issues 1

Halo: Path Traversal in Backup Download Leads to Arbitrary File Read 1.severity: security

#535591 by nixpkgs-security-tracker · opened 3mo ago · 0 comments