VYPR

Helium

by Helium

CVEs (1)

  • CVE-2026-55875MedOct 15, 2026
    risk 0.21cvss 4.3epss —

    Helium is a free online student planner for classes, homework, grades, and notes. Prior to 2.2.60, any authenticated user can submit an arbitrary URL to POST /feed/externalcalendars/, where helium/feed/services/icalexternalcalendarservice.py uses validate_url to check only URL…