Heliumedu Platform vulnerabilities

• heliumedu platform Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network CVE-2026-55875 4.3 MediumOctober 15, 2026
• heliumedu platform Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts CVE-2026-55876 3.5 LowOctober 15, 2026