heymrun vulnerabilities

Newest CVEs

• CVE-2026-110873

  Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

  heymrun · heym

  High7.1
• CVE-2026-55376

  heym Python Tool Sandbox Escape

  heymrun · heym

  High8.8
• CVE-2026-109362

  Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens

  heymrun · heym

  Medium5.3
• CVE-2026-105396

  Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

  heymrun · heym

  Medium5.3
• CVE-2026-101050

  Heym before 0.0.53 Authentication Bypass via Telegram Webhook

  heymrun · heym

  High8.3
• CVE-2026-101049

  Heym before 0.0.53 Slack Webhook Signature Verification Bypass

  heymrun · heym

  High8.3
• CVE-2026-100865

  Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

  heymrun · heym

  High8.7
• CVE-2026-100864

  heym before 0.0.91 Remote Code Execution via Expression Engine

  heymrun · heym

  High8.7
• CVE-2026-100863

  Heym before 0.0.91 SSRF via image fetching and IPv6 validation

  heymrun · heym

  Medium5.3
• CVE-2026-100862

  heym before 0.0.91 Multiple Secrets Plaintext Storage

  heymrun · heym

  Medium6.9