What’s Vulnerable › Products

heymrun heym vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Check whether your heymrun heym version is affected

Latest heymrun heym vulnerabilities

• CVE-2026-110873 — Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field (CVSS 7.1)
• CVE-2026-55376 — heym Python Tool Sandbox Escape (CVSS 8.8)
• CVE-2026-109362 — Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens (CVSS 5.4)
• CVE-2026-105396 — Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header (CVSS 5.4)
• CVE-2026-101050 — Heym before 0.0.53 Authentication Bypass via Telegram Webhook (CVSS 6.5)
• CVE-2026-101049 — Heym before 0.0.53 Slack Webhook Signature Verification Bypass (CVSS 6.5)
• CVE-2026-100865 — Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape (CVSS 8.8)
• CVE-2026-100864 — heym before 0.0.91 Remote Code Execution via Expression Engine (CVSS 8.8)
• CVE-2026-100863 — Heym before 0.0.91 SSRF via image fetching and IPv6 validation (CVSS 5.0)
• CVE-2026-100862 — heym before 0.0.91 Multiple Secrets Plaintext Storage (CVSS 4.9)
• CVE-2026-100861 — heym before 0.0.105 SSRF via credential-controlled base URLs (CVSS 5.0)
• CVE-2026-100860 — heym before 0.0.105 Authentication Bypass via Redis Node (CVSS 5.5)
• CVE-2026-100859 — Heym before 0.0.106 Credential Exfiltration via URL Override (CVSS 6.5)
• CVE-2026-100858 — heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes (CVSS 6.8)
• CVE-2026-84207 — Heym before 0.0.98 SSRF via WebSocket endpoints (CVSS 5.4)
• CVE-2026-45227 — Heym < 0.0.21 Sandbox Escape via Python Introspection (CVSS 8.8)
• CVE-2026-45226 — Heym < 0.0.21 Authorization Bypass in Workflow Execution (CVSS 7.1)
• CVE-2026-45225 — Heym < 0.0.21 Path Traversal File Upload via upload_file() (CVSS 7.6)