Heymrun Heym vulnerabilities

• heymrun heym Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field CVE-2026-110873 7.1 HighOctober 14, 2026
• heymrun heym heym Python Tool Sandbox Escape CVE-2026-55376 8.8 HighOctober 13, 2026
• heymrun heym Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens CVE-2026-109362 5.3 MediumOctober 12, 2026
• heymrun heym Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header CVE-2026-105396 5.3 MediumOctober 5, 2026
• heymrun heym Heym before 0.0.53 Authentication Bypass via Telegram Webhook CVE-2026-101050 8.3 HighSeptember 27, 2026
• heymrun heym Heym before 0.0.53 Slack Webhook Signature Verification Bypass CVE-2026-101049 8.3 HighSeptember 27, 2026
• heymrun heym Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape CVE-2026-100865 8.7 HighSeptember 27, 2026
• heymrun heym heym before 0.0.91 Remote Code Execution via Expression Engine CVE-2026-100864 8.7 HighSeptember 27, 2026
• heymrun heym Heym before 0.0.91 SSRF via image fetching and IPv6 validation CVE-2026-100863 5.3 MediumSeptember 27, 2026
• heymrun heym heym before 0.0.91 Multiple Secrets Plaintext Storage CVE-2026-100862 6.9 MediumSeptember 27, 2026
• heymrun heym heym before 0.0.105 SSRF via credential-controlled base URLs CVE-2026-100861 5.3 MediumSeptember 27, 2026
• heymrun heym heym before 0.0.105 Authentication Bypass via Redis Node CVE-2026-100860 6.8 MediumSeptember 27, 2026
• heymrun heym Heym before 0.0.106 Credential Exfiltration via URL Override CVE-2026-100859 7.1 HighSeptember 27, 2026
• heymrun heym heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes CVE-2026-100858 7.6 HighSeptember 27, 2026
• heymrun heym Heym before 0.0.98 SSRF via WebSocket endpoints CVE-2026-84207 5.3 MediumSeptember 1, 2026
• heymrun heym Heym < 0.0.21 Sandbox Escape via Python Introspection CVE-2026-45227 8.7 HighMay 12, 2026
• heymrun heym Heym < 0.0.21 Authorization Bypass in Workflow Execution CVE-2026-45226 7.6 HighMay 12, 2026
• heymrun heym Heym < 0.0.21 Path Traversal File Upload via upload_file() CVE-2026-45225 7.2 HighMay 12, 2026