Issues

• 关闭开放注册后，隐藏的“注册需验证邮箱”仍对所有已有用户和 PAT 生效（2.26 返回 403 email-not-set）

  Feature

  halo-dev/halo#10356 · Filter by author Leezj9671 opened on Sep 30, 2026 · 2.27.0
  1

• Console password changes should not require sudo verification

  area/consolekind/bug
  halo-dev/halo#10353 · Filter by author ruibaby opened on Sep 28, 2026
  1

  

• [Security] Potential stored XSS through inline local HTML/SVG attachments

  halo-dev/halo#10351 · Filter by author bupt-Yy-young opened on Sep 25, 2026

• 首次启动被打断会留下空 RSA 密钥文件，导致应用永久陷入启动崩溃循环（empty pat_id_rsa files）

  halo-dev/halo#10336 · Filter by author sisyphusend opened on Sep 22, 2026
  1

• 关于表格的自适应列宽

  halo-dev/halo#10328 · Filter by author sqwfly opened on Sep 19, 2026

• 无法恢复备份

  Bug

  halo-dev/halo#10298 · Filter by author Dominic-KK opened on Sep 8, 2026
  1

• 在用户设置中增加对用户名/显示名称最小/最大长度的限制设置

  Feature

  halo-dev/halo#10286 · Filter by author AR-26710 opened on Sep 3, 2026

• [Security] Theme template SpEL injection leads to RCE

  halo-dev/halo#10259 · Filter by author RichardMinm opened on Aug 18, 2026
  2

• Unauthenticated Open Redirect via Thumbnail via-uri Endpoint (v2.25.1)

  halo-dev/halo#10247 · Filter by author geo-chen opened on Aug 16, 2026

• 支持自定义密码复杂度，现在的密码校验过于简单

  Feature

  halo-dev/halo#10195 · Filter by author Mikasa33 opened on Aug 3, 2026

• 功能增强：允许开发者将 settings.yaml 拆分为按组命名的配置文件（如 settings/post.yaml）同时保留单一配置文件兼容

  Feature

  halo-dev/halo#10095 · Filter by author AR-26710 opened on Jun 16, 2026
  1

• 附件库的设计建议

  Feature

  halo-dev/halo#10086 · Filter by author holwell opened on Jun 14, 2026

• 无法从备份文件恢复

  halo-dev/halo#10067 · Filter by author xpeng4643 opened on Jun 10, 2026
  6

• Improve Console theme and plugin detail pages with capability summaries

  Feature

  halo-dev/halo#10044 · Filter by author ruibaby opened on Jun 1, 2026 · Backlog
  

• Proposal: Build a unified component library and Design Token system for Console, UC, and plugins

  Feature

  halo-dev/halo#10040 · Filter by author ruibaby opened on May 28, 2026
  

• 新增聚合码线上收款

  halo-dev/halo#9925 · Filter by author CyberspaceSecurity99 opened on Apr 27, 2026

• 希望在Halo的邮件通知系统增加配置Reply-To的可选项

  halo-dev/halo#9903 · Filter by author queenyn opened on Apr 19, 2026

• Open redirect on unauthenticated thumbnail endpoint (LOW-MEDIUM)

  halo-dev/halo#9898 · Filter by author Sachinart opened on Apr 16, 2026

• 【Halo商业版】支付方式支持问题

  halo-dev/halo#9868 · Filter by author carolcoral opened on Apr 9, 2026

• array组件渲染异常

  area/uikind/bug
  halo-dev/halo#8375 · Filter by author w-flac opened on Feb 27, 2026
  16

  

• 【halo商业版】商城移动端没办法H5支付

  halo-dev/halo#8362 · Filter by author a770177666 opened on Feb 24, 2026
  1

• 升级2.22.x后, slug为四位数, 比如 1207时, 访问文章, 变成 文章归档 页面

  area/corekind/bug
  halo-dev/halo#8314 · Filter by author woodchen-ink opened on Feb 3, 2026
  6

  

• 希望“图片集”内的图片可以增加“图片描述文本”

  area/editorkind/feature
  halo-dev/halo#8243 · Filter by author imorisun opened on Jan 17, 2026
  10

  

• 邮件通知的国际化支持

  area/corekind/improvement
  halo-dev/halo#8002 · Filter by author thetbw opened on Dec 9, 2025
  1

• 提供多一些的评论接口

  area/corekind/api-change
  halo-dev/halo#7965 · Filter by author acanyo opened on Nov 26, 2025 · Backlog
  3