Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: heymrun heym 0.0.21 Clear all filters
TI-2026-33042 CVE-2026-45227 · GHSA-vhhj-j98h-xx8p

Heym < 0.0.21 Sandbox Escape via Python Introspection

Priority HIGH 73

Heym before 0.0.21 contains a sandbox escape vulnerability in the custom Python tool executor that allows authenticated workflow authors to bypass sandbox restrictions by using object-graph introspection primitives.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00289 Published 2026-05-12 Fixed in 0.0.21 CWE-693
TI-2026-33041 CVE-2026-45226 · GHSA-p953-2g5p-33c5

Heym < 0.0.21 Authorization Bypass in Workflow Execution

Priority LOW 35

Heym before 0.0.21 contains an authorization bypass vulnerability in workflow execution that allows authenticated users to execute arbitrary workflows by referencing victim workflow UUIDs without proper access validation…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00293 Published 2026-05-12 Fixed in 0.0.21 CWE-863
TI-2026-33040 CVE-2026-45225 · GHSA-pxhc-h7q5-6qrg

Heym < 0.0.21 Path Traversal File Upload via upload_file()

Priority HIGH 65

Heym before 0.0.21 contains a path traversal vulnerability in the file upload endpoint that allows authenticated users to write attacker-controlled files to arbitrary locations by supplying a crafted filename with traver…

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00355 Published 2026-05-12 Fixed in 0.0.21 CWE-22