Advisories · Technology
heym.
Every CVE that names heym among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field
- heym
- Broken access control
- CVSS 8.8 High
heym Python Tool Sandbox Escape
- heym
- Command injection
- Code injection
- CVSS 5.3 Medium
Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens
- heym
- Authentication bypass
- CVSS 5.3 Medium
Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
- heym
- CWE-346
- CVSS 8.3 High
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
- heym
- Authentication bypass
- CVSS 8.3 High
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
- heym
- Authentication bypass
- CVSS 8.7 High
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
- heym
- Code injection
- CVSS 8.7 High
heym before 0.0.91 Remote Code Execution via Expression Engine
- heym
- Code injection
- CVSS 5.3 Medium
Heym before 0.0.91 SSRF via image fetching and IPv6 validation
- heym
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
heym before 0.0.91 Multiple Secrets Plaintext Storage
- heym
- Information disclosure
- CVSS 5.3 Medium
heym before 0.0.105 SSRF via credential-controlled base URLs
- heym
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
heym before 0.0.105 Authentication Bypass via Redis Node
- heym
- CWE-636
- CVSS 7.1 High
Heym before 0.0.106 Credential Exfiltration via URL Override
- heym
- Server-side request forgery (SSRF)
- CVSS 7.6 High
heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes
- heym
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Heym before 0.0.98 SSRF via WebSocket endpoints
- heym
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Heym < 0.0.21 Sandbox Escape via Python Introspection
- heym
- CWE-693
- CVSS 7.6 High
Heym < 0.0.21 Authorization Bypass in Workflow Execution
- heym
- Broken access control
- CVSS 7.2 High
Heym < 0.0.21 Path Traversal File Upload via upload_file()
- heym
- Path traversal