Heymrun Heym
12 CVEs affecting Heymrun Heym. Latest disclosed: 2026-09-27. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100865 | High | 8.8 | 2026-09-27 | Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition evaluator uses Python eval() without an effective sandbox, allowin… |
CVE-2026-100864 | High | 8.8 | 2026-09-27 | heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users… |
CVE-2026-45227 | High | 8.8 | 2026-05-12 | Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox rest… |
CVE-2026-45225 | High | 7.6 | 2026-05-12 | Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to ar… |
CVE-2026-45226 | High | 7.1 | 2026-05-12 | Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by refer… |
CVE-2026-100858 | Medium | 6.8 | 2026-09-27 | heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to… |
CVE-2026-100859 | Medium | 6.5 | 2026-09-27 | Heym before 0.0.106 contains a credential exfiltration vulnerability in the POST /api/credentials/test endpoint that allows collaborators with shared credentia… |
CVE-2026-100860 | Medium | 5.5 | 2026-09-27 | heym before 0.0.105 does not act on the result of the credential authorization lookup in the Redis workflow node (backend/app/services/node_execution/nodes/red… |
CVE-2026-84207 | Medium | 5.4 | 2026-09-01 | Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal service… |
CVE-2026-100863 | Medium | 5.0 | 2026-09-27 | Heym versions 0.0.90 and earlier contain two server-side request forgery (SSRF) egress gaps, both remediated in app/services/ssrf_guard.py in 0.0.91. First, th… |
CVE-2026-100861 | Medium | 5.0 | 2026-09-27 | heym before 0.0.105 fails to apply egress guards to integration services that use credential-supplied base URLs, allowing authenticated users to bypass SSRF pr… |
CVE-2026-100862 | Medium | 4.9 | 2026-09-27 | heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook… |