{"api_version":"v1","generated_at":"2026-10-08T15:15:00+00:00","product":{"cve_count":10,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-halo-dev-halo-4afe0f4f03cf","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/halo","name":"Halo","next_cursor":null,"observations":[{"affected":"Halo: 2.25.0, 2.25.1, 2.25.2, 2.25.3, 2.25.4, 2.26.0, 2.26.1","affected_versions_present":true,"cve_id":"CVE-2026-97182","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-97182","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:32:55.303Z","patch_url":"","primary_source":"","published":"2026-09-24T12:00:14.402Z"},{"affected":"halo: \u2264 2.26.1","affected_versions_present":true,"cve_id":"CVE-2026-91772","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-91772","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:22:25.023Z","patch_url":"","primary_source":"","published":"2026-09-15T01:20:33.781Z"},{"affected":"2.24.0; 2.24.1; 2.24.2","affected_versions_present":true,"cve_id":"CVE-2026-16088","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-16088","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-20T15:30:25.980Z","patch_url":"","primary_source":"","published":"2026-07-18T09:45:08.762Z"},{"affected":"2.24.0; 2.24.1; 2.24.2","affected_versions_present":true,"cve_id":"CVE-2026-15326","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-15326","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-07-10T14:04:36.292Z","patch_url":"","primary_source":"","published":"2026-07-10T03:15:08.830Z"},{"affected":"< 2.24.3","affected_versions_present":true,"cve_id":"CVE-2026-55439","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-55439","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-06-25T18:41:27.946Z","patch_url":"","primary_source":"","published":"2026-06-25T15:57:08.639Z"},{"affected":"< 2.20.13","affected_versions_present":true,"cve_id":"CVE-2024-56156","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-56156","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-02-03T18:07:18.738Z","patch_url":"https://github.com/halo-dev/halo/security/advisories/GHSA-99mc-ch53-pqh9","primary_source":"","published":"2025-04-25T15:08:00.942Z"},{"affected":"< 2.19.0","affected_versions_present":true,"cve_id":"CVE-2024-43793","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-43793","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-11T15:01:32.493Z","patch_url":"","primary_source":"","published":"2024-09-11T14:37:57.666Z"},{"affected":"< 2.17.0","affected_versions_present":true,"cve_id":"CVE-2024-43792","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-43792","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-03T14:20:31.645Z","patch_url":"","primary_source":"","published":"2024-09-02T16:15:40.485Z"},{"affected":"v1.0.0 < unspecified; unspecified \u2264 v1.4.17; next of v1.4.17 < unspecified","affected_versions_present":true,"cve_id":"CVE-2022-22125","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-22125","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T04:20:50.355Z","patch_url":"","primary_source":"","published":"2022-01-13T16:45:17.760Z"},{"affected":"v1.0.0 < unspecified; unspecified \u2264 v1.4.17; next of v1.4.17 < unspecified","affected_versions_present":true,"cve_id":"CVE-2022-22124","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-22124","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T02:42:04.777Z","patch_url":"","primary_source":"","published":"2022-01-13T16:45:16.379Z"},{"affected":"v1.0.0 < unspecified; unspecified \u2264 v1.4.17; next of v1.4.17 < unspecified","affected_versions_present":true,"cve_id":"CVE-2022-22123","cve_url":"https://cve.blacktree.nl/cve/CVE-2022-22123","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2024-09-17T01:51:59.138Z","patch_url":"","primary_source":"","published":"2022-01-13T16:45:14.866Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"halo-dev"}}