agentprime: heymEvery new CVE for heym.https://agentprime.io/CVE-2026-110873: Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Fieldhttps://agentprime.io/advisories/CVE-2026-110873/https://agentprime.io/advisories/CVE-2026-110873/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 22:53:01 GMTCVECVE-2026-55376: heym Python Tool Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-55376/https://agentprime.io/advisories/CVE-2026-55376/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 15:12:49 GMTCVECVE-2026-109362: Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokenshttps://agentprime.io/advisories/CVE-2026-109362/https://agentprime.io/advisories/CVE-2026-109362/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:40 GMTCVECVE-2026-105396: Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Headerhttps://agentprime.io/advisories/CVE-2026-105396/https://agentprime.io/advisories/CVE-2026-105396/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 11:09:45 GMTCVECVE-2026-101050: Heym before 0.0.53 Authentication Bypass via Telegram Webhookhttps://agentprime.io/advisories/CVE-2026-101050/https://agentprime.io/advisories/CVE-2026-101050/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 16:28:28 GMTCVECVE-2026-101049: Heym before 0.0.53 Slack Webhook Signature Verification Bypasshttps://agentprime.io/advisories/CVE-2026-101049/https://agentprime.io/advisories/CVE-2026-101049/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 16:28:28 GMTCVECVE-2026-100865: Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-100865/https://agentprime.io/advisories/CVE-2026-100865/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:53 GMTCVECVE-2026-100864: heym before 0.0.91 Remote Code Execution via Expression Enginehttps://agentprime.io/advisories/CVE-2026-100864/https://agentprime.io/advisories/CVE-2026-100864/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:53 GMTCVECVE-2026-100863: Heym before 0.0.91 SSRF via image fetching and IPv6 validationhttps://agentprime.io/advisories/CVE-2026-100863/https://agentprime.io/advisories/CVE-2026-100863/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:52 GMTCVECVE-2026-100862: heym before 0.0.91 Multiple Secrets Plaintext Storagehttps://agentprime.io/advisories/CVE-2026-100862/https://agentprime.io/advisories/CVE-2026-100862/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:51 GMTCVECVE-2026-100861: heym before 0.0.105 SSRF via credential-controlled base URLshttps://agentprime.io/advisories/CVE-2026-100861/https://agentprime.io/advisories/CVE-2026-100861/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:51 GMTCVECVE-2026-100860: heym before 0.0.105 Authentication Bypass via Redis Nodehttps://agentprime.io/advisories/CVE-2026-100860/https://agentprime.io/advisories/CVE-2026-100860/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:50 GMTCVECVE-2026-100859: Heym before 0.0.106 Credential Exfiltration via URL Overridehttps://agentprime.io/advisories/CVE-2026-100859/https://agentprime.io/advisories/CVE-2026-100859/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:49 GMTCVECVE-2026-100858: heym before 0.0.109 Server-Side Request Forgery via Workflow Nodeshttps://agentprime.io/advisories/CVE-2026-100858/https://agentprime.io/advisories/CVE-2026-100858/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 01:28:49 GMTCVECVE-2026-84207: Heym before 0.0.98 SSRF via WebSocket endpointshttps://agentprime.io/advisories/CVE-2026-84207/https://agentprime.io/advisories/CVE-2026-84207/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 01 Sep 2026 15:19:00 GMTCVECVE-2026-45227: Heym < 0.0.21 Sandbox Escape via Python Introspectionhttps://agentprime.io/advisories/CVE-2026-45227/https://agentprime.io/advisories/CVE-2026-45227/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 21:18:34 GMTCVECVE-2026-45226: Heym < 0.0.21 Authorization Bypass in Workflow Executionhttps://agentprime.io/advisories/CVE-2026-45226/https://agentprime.io/advisories/CVE-2026-45226/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 21:17:10 GMTCVECVE-2026-45225: Heym < 0.0.21 Path Traversal File Upload via upload_file()https://agentprime.io/advisories/CVE-2026-45225/https://agentprime.io/advisories/CVE-2026-45225/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 12 May 2026 21:09:28 GMTCVE