Vulnerability · Published Jan 30, 2026 · Assigned by TR-CERT
CVE-2025-1395Sensitive Data Exposure in CoDeriApp's HeyGarson
High 8.2
In plain English
A high-severity security flaw in HeyGarson from Codriapp Innovation and Software Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 74.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Generation of Error Message Containing Sensitive Information vulnerability in Codriapp Innovation and Software Technologies Inc. HeyGarson allows Fuzzing for application mapping. This issue affects HeyGarson: through 30012026. NOTE: The vendor was contacted and it was learned that the product is not supported.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Codriapp Innovation and Software Technologies Inc. | HeyGarson | 0 – through 30012026 |
Weakness: CWE-209 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- https://www.usom.gov.tr/bildirim/tr-26-0009 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0009 government-resource