HE
Product
heym
18
CVEs
0
On KEV
8.8
Max CVSS
4
New 30D
Severity mix
Critical 0High 7Medium 11Low 0
Watch
Add heym to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-100858 | 6.8 | Sep 27 | heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes Affected: before 0.0.109 |
| CVE-2026-101050 | 6.5 | Sep 27 | Heym before 0.0.53 Authentication Bypass via Telegram Webhook Affected: before 0.0.53 |
| CVE-2026-101049 | 6.5 | Sep 27 | Heym before 0.0.53 Slack Webhook Signature Verification Bypass Affected: before 0.0.53 |
| CVE-2026-100859 | 6.5 | Sep 27 | Heym before 0.0.106 Credential Exfiltration via URL Override Affected: before 0.0.106 |
| CVE-2026-100860 | 5.5 | Sep 27 | heym before 0.0.105 Authentication Bypass via Redis Node Affected: before 0.0.105 |
| CVE-2026-109362 | 5.4 | Oct 12 | Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens Affected: 0.0.5 before 0.0.113 |
| CVE-2026-105396 | 5.4 | Oct 5 | Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header Affected: before 0.0.112 |
| CVE-2026-84207 | 5.4 | Sep 1 | Heym before 0.0.98 SSRF via WebSocket endpoints Affected: before 0.0.98 |
| CVE-2026-100863 | 5.0 | Sep 27 | Heym before 0.0.91 SSRF via image fetching and IPv6 validation Affected: before 0.0.91 |
| CVE-2026-100861 | 5.0 | Sep 27 | heym before 0.0.105 SSRF via credential-controlled base URLs Affected: before 0.0.105 |
| CVE-2026-100862 | 4.9 | Sep 27 | heym before 0.0.91 Multiple Secrets Plaintext Storage Affected: before 0.0.91 |
Showing 11