Hheymrun

Products

Exploited and recent CVEs

• CVE-2026-110873 High 7.1 Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field 0.2%
• CVE-2026-55376 High 8.8 heym Python Tool Sandbox Escape 0.5%
• CVE-2026-109362 Medium 5.4 Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens 0.2%
• CVE-2026-105396 Medium 5.4 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header <0.1%
• CVE-2026-101050 Medium 6.5 Heym before 0.0.53 Authentication Bypass via Telegram Webhook 0.4%
• CVE-2026-101049 Medium 6.5 Heym before 0.0.53 Slack Webhook Signature Verification Bypass 0.4%
• CVE-2026-100865 High 8.8 Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape 0.4%
• CVE-2026-100864 High 8.8 heym before 0.0.91 Remote Code Execution via Expression Engine 0.9%
• CVE-2026-100863 Medium 5.0 Heym before 0.0.91 SSRF via image fetching and IPv6 validation 0.2%
• CVE-2026-100862 Medium 4.9 heym before 0.0.91 Multiple Secrets Plaintext Storage 0.2%
• CVE-2026-100861 Medium 5.0 heym before 0.0.105 SSRF via credential-controlled base URLs 0.2%
• CVE-2026-100860 Medium 5.5 heym before 0.0.105 Authentication Bypass via Redis Node 0.2%
• CVE-2026-100859 Medium 6.5 Heym before 0.0.106 Credential Exfiltration via URL Override 0.3%
• CVE-2026-100858 Medium 6.8 heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes 0.3%
• CVE-2026-84207 Medium 5.4 Heym before 0.0.98 SSRF via WebSocket endpoints 0.3%
• CVE-2026-45227 High 8.8 Heym < 0.0.21 Sandbox Escape via Python Introspection 0.3%
• CVE-2026-45226 High 7.1 Heym < 0.0.21 Authorization Bypass in Workflow Execution 0.3%
• CVE-2026-45225 High 7.6 Heym < 0.0.21 Path Traversal File Upload via upload_file() 0.4%