Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

heymrun — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting heymrun. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page provides a comprehensive aggregation of security vulnerabilities associated with the heymrun vendor, focusing on the Common Weakness Enumeration (CWE) classification framework. It systematically collects data regarding software flaws and security misconfigurations identified in heymrun products, covering reported incidents from early 2021 through the present day to ensure historical continuity. By consulting this resource, users can effectively track the vendor’s public security advisories to monitor mitigation efforts, gain a deeper understanding of prevalent weakness classes affecting their ecosystem, and examine the complete vulnerability history of specific products to assess long-term risk exposure. The data is structured to facilitate rapid analysis for security professionals, allowing them to identify patterns in defect types and evaluate the overall security posture of heymrun over time. This aggregation serves as a centralized reference for auditing, penetration testing, and risk management activities, ensuring that stakeholders have access to accurate and timely information regarding past and present security issues. The content is regularly updated to reflect newly disclosed flaws and corrected records, maintaining high fidelity for technical decision-making. Users are encouraged to cross-reference this information with official vendor channels for the most current remediation guidance and patch availability.

Top products by heymrun: heym
CVE ID Title CVSS Severity Published
CVE-2026-55376 heym Python Tool Sandbox Escape — heym CWE-78 8.8 High 2026-10-13
CVE-2026-109362 Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens — heym CWE-613 5.4 Medium 2026-10-12
CVE-2026-105396 Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header — heym CWE-346 5.4 Medium 2026-10-05
CVE-2026-101050 Heym before 0.0.53 Authentication Bypass via Telegram Webhook — heym CWE-287 6.5 Medium 2026-09-27
CVE-2026-101049 Heym before 0.0.53 Slack Webhook Signature Verification Bypass — heym CWE-287 6.5 Medium 2026-09-27
CVE-2026-100865 Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape — heym CWE-94 8.8 High 2026-09-27
CVE-2026-100863 Heym before 0.0.91 SSRF via image fetching and IPv6 validation — heym CWE-918 5.0 Medium 2026-09-27
CVE-2026-100864 heym before 0.0.91 Remote Code Execution via Expression Engine — heym CWE-94 8.8 High 2026-09-27
CVE-2026-100862 heym before 0.0.91 Multiple Secrets Plaintext Storage — heym CWE-312 4.9 Medium 2026-09-27
CVE-2026-100861 heym before 0.0.105 SSRF via credential-controlled base URLs — heym CWE-918 5.0 Medium 2026-09-27
CVE-2026-100860 heym before 0.0.105 Authentication Bypass via Redis Node — heym CWE-636 5.5 Medium 2026-09-27
CVE-2026-100859 Heym before 0.0.106 Credential Exfiltration via URL Override — heym CWE-918 6.5 Medium 2026-09-27
CVE-2026-100858 heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes — heym CWE-918 6.8 Medium 2026-09-27
CVE-2026-84207 Heym before 0.0.98 SSRF via WebSocket endpoints — heym CWE-918 5.4 Medium 2026-09-01
CVE-2026-45227 Heym < 0.0.21 Sandbox Escape via Python Introspection — heym CWE-693 8.8 High 2026-05-12
CVE-2026-45226 Heym < 0.0.21 Authorization Bypass in Workflow Execution — heym CWE-863 7.1 High 2026-05-12
CVE-2026-45225 Heym < 0.0.21 Path Traversal File Upload via upload_file() — heym CWE-22 7.6 High 2026-05-12

This page lists every published CVE security advisory associated with heymrun. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.