H
Vendor security profile
heymrun
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical0
CISA KEV0
Public exploit8
Patch rate%29
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
11
3
CVE KEV
CVE severity distribution
14toplam CVE
High7 (50%)
Medium7 (50%)
Patch and exploitation view
%29
Verified patch
%0
CISA KEV
%57
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
10Unknown
Latest vulnerabilities
8.8
CVE-2026-55376
heym Python Tool Sandbox Escape
H
Patch status unknown
5.3
CVE-2026-109362
Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution Tokens
H
Patch status unknownEPSS %0
5.3
CVE-2026-105396
Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
H
Patch status unknownEPSS %0
8.3
CVE-2026-101050
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
H
Patch verifiedEPSS %0
8.3
CVE-2026-101049
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
H
Patch verifiedEPSS %0
8.7
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
H
Patch verifiedEPSS %0
8.7
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engine
H
Patch status unknownEPSS %1
5.3
CVE-2026-100863
Heym before 0.0.91 SSRF via image fetching and IPv6 validation
H
Patch status unknownEPSS %0
6.9
CVE-2026-100862
heym before 0.0.91 Multiple Secrets Plaintext Storage
H
Patch status unknownEPSS %0
5.3
CVE-2026-100861
heym before 0.0.105 SSRF via credential-controlled base URLs
H
Patch status unknownEPSS %0