Vendor

    Heymrun

    25 known vulnerabilities in products by Heymrun, 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Heymrun
    HighCVE-2026-100864

    heym before 0.0.91 Remote Code Execution via Expression Engine

    		8.8
    HighCVE-2026-55376

    heym Python Tool Sandbox Escape

    		8.8
    HighCVE-2026-100865

    Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

    		8.8
    HighCVE-2026-101050

    Heym before 0.0.53 Authentication Bypass via Telegram Webhook

    		6.5
    HighCVE-2026-101049

    Heym before 0.0.53 Slack Webhook Signature Verification Bypass

    		6.5
    HighCVE-2026-67544

    Heym: Playwright Custom Code Backend RCE via `playwrightCode` Field

    		8.8
    HighCVE-2026-67546

    Heym: Code Injection

    		8.8
    HighCVE-2026-67543

    Heym: Code Injection

    		8.8
    HighCVE-2026-100858

    heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes

    		6.8
    HighCVE-2026-67541

    Heym: Incorrect Privilege Assignment

    		8.1
    HighCVE-2026-67545

    Heym: Server-Side Request Forgery (SSRF) in HTTP Workflow Node

    		7.4
    HighCVE-2026-110873

    Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field

    		7.1
    HighCVE-2026-67542

    Heym: Server-Side Request Forgery (SSRF)

    		7.1
    HighCVE-2026-100859

    Heym before 0.0.106 Credential Exfiltration via URL Override

    		6.5
    HighCVE-2026-45227

    Heym < 0.0.21 Sandbox Escape via Python Introspection

    		8.8
    MediumCVE-2026-67540

    Heym: Authorization Bypass Through User-Controlled Key

    		6.5
    MediumCVE-2026-100860

    heym before 0.0.105 Authentication Bypass via Redis Node

    		5.5
    MediumCVE-2026-100862

    heym before 0.0.91 Multiple Secrets Plaintext Storage

    		4.9
    HighCVE-2026-45225

    Heym < 0.0.21 Path Traversal File Upload via upload_file()

    		7.6
    HighCVE-2026-45226

    Heym < 0.0.21 Authorization Bypass in Workflow Execution

    		7.1
    MediumCVE-2026-109362

    Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens

    		5.4
    MediumCVE-2026-84207

    Heym before 0.0.98 SSRF via WebSocket endpoints

    		5.4
    MediumCVE-2026-105396

    Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

    		5.4
    MediumCVE-2026-100863

    Heym before 0.0.91 SSRF via image fetching and IPv6 validation

    		5.0
    MediumCVE-2026-100861

    heym before 0.0.105 SSRF via credential-controlled base URLs

    		5.0

    Products

    Products by Heymrun
    Heym250