HE
Vendor
heymrun
18
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110873 | HE heym heymrun | 7.1 | Oct 14 | Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field |
| CVE-2026-55376 | HE heym heymrun | 8.8 | Oct 13 | heym Python Tool Sandbox Escape |
| CVE-2026-109362 | HE heym heymrun | 5.4 | Oct 12 | Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens |
| CVE-2026-105396 | HE heym heymrun | 5.4 | Oct 5 | Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header |
| CVE-2026-101050 | HE heym heymrun | 6.5 | Sep 27 | Heym before 0.0.53 Authentication Bypass via Telegram Webhook |
| CVE-2026-101049 | HE heym heymrun | 6.5 | Sep 27 | Heym before 0.0.53 Slack Webhook Signature Verification Bypass |
| CVE-2026-100865 | HE heym heymrun | 8.8 | Sep 27 | Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape |
| CVE-2026-100864 | HE heym heymrun | 8.8 | Sep 27 | heym before 0.0.91 Remote Code Execution via Expression Engine |
| CVE-2026-100863 | HE heym heymrun | 5.0 | Sep 27 | Heym before 0.0.91 SSRF via image fetching and IPv6 validation |
| CVE-2026-100862 | HE heym heymrun | 4.9 | Sep 27 | heym before 0.0.91 Multiple Secrets Plaintext Storage |
| CVE-2026-100861 | HE heym heymrun | 5.0 | Sep 27 | heym before 0.0.105 SSRF via credential-controlled base URLs |
| CVE-2026-100860 | HE heym heymrun | 5.5 | Sep 27 | heym before 0.0.105 Authentication Bypass via Redis Node |
| CVE-2026-100859 | HE heym heymrun | 6.5 | Sep 27 | Heym before 0.0.106 Credential Exfiltration via URL Override |
| CVE-2026-100858 | HE heym heymrun | 6.8 | Sep 27 | heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes |
| CVE-2026-84207 | HE heym heymrun | 5.4 | Sep 1 | Heym before 0.0.98 SSRF via WebSocket endpoints |
| CVE-2026-45227 | HE heym heymrun | 8.8 | May 12 | Heym < 0.0.21 Sandbox Escape via Python Introspection |
| CVE-2026-45226 | HE heym heymrun | 7.1 | May 12 | Heym < 0.0.21 Authorization Bypass in Workflow Execution |
| CVE-2026-45225 | HE heym heymrun | 7.6 | May 12 | Heym < 0.0.21 Path Traversal File Upload via upload_file() |