HeliumEdu platform

• CVE-2026-55875 Medium 4.3 Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network 0.2%
• CVE-2026-55876 Low 3.5 Helium: Stored XSS via Unrestricted SVG File Upload — Authenticated Users Can Store Executable Scripts 0.2%