Vulnerabilidades en heymrun
18 resultadosCVE-2026-100864HIGHheym before 0.0.91 Remote Code Execution via Expression EngineEPSS 0.9%CVE-2026-55376HIGHheym Python Tool Sandbox EscapeEPSS 0.5%CVE-2026-100865HIGHHeym before 0.0.53 Remote Code Execution via eval() Sandbox EscapeEPSS 0.4%CVE-2026-101049HIGHHeym before 0.0.53 Slack Webhook Signature Verification BypassEPSS 0.4%CVE-2026-101050HIGHHeym before 0.0.53 Authentication Bypass via Telegram WebhookEPSS 0.4%CVE-2026-45225HIGHHeym < 0.0.21 Path Traversal File Upload via upload_file()EPSS 0.4%CVE-2026-84207MEDIUMHeym before 0.0.98 SSRF via WebSocket endpointsEPSS 0.3%CVE-2026-100858HIGHheym before 0.0.109 Server-Side Request Forgery via Workflow NodesEPSS 0.3%CVE-2026-45226HIGHHeym < 0.0.21 Authorization Bypass in Workflow ExecutionEPSS 0.3%CVE-2026-45227HIGHHeym < 0.0.21 Sandbox Escape via Python IntrospectionEPSS 0.3%CVE-2026-100859HIGHHeym before 0.0.106 Credential Exfiltration via URL OverrideEPSS 0.3%CVE-2026-100863MEDIUMHeym before 0.0.91 SSRF via image fetching and IPv6 validationEPSS 0.2%CVE-2026-100861MEDIUMheym before 0.0.105 SSRF via credential-controlled base URLsEPSS 0.2%CVE-2026-100860MEDIUMheym before 0.0.105 Authentication Bypass via Redis NodeEPSS 0.2%CVE-2026-110873HIGHHeym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id FieldEPSS 0.2%CVE-2026-109362MEDIUMHeym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution TokensEPSS 0.2%CVE-2026-100862MEDIUMheym before 0.0.91 Multiple Secrets Plaintext StorageEPSS 0.2%CVE-2026-105396MEDIUMHeym before v0.0.112 HITL Review Token Leak via Spoofable Origin HeaderEPSS 0.1%