H
Vendor security profile
heymrun
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical0
CISA KEV0
Public exploit8
Patch rate%33
Avg. CVSS7.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
11
1
CVE KEV
CVE severity distribution
12toplam CVE
High6 (50%)
Medium6 (50%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%67
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
8Unknown
Latest vulnerabilities
5.3
CVE-2026-105396
Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header
H
Patch status unknownEPSS %0
8.3
CVE-2026-101050
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
H
Patch verifiedEPSS %0
8.3
CVE-2026-101049
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
H
Patch verifiedEPSS %0
8.7
CVE-2026-100865
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
H
Patch verifiedEPSS %0
8.7
CVE-2026-100864
heym before 0.0.91 Remote Code Execution via Expression Engine
H
Patch status unknownEPSS %1
5.3
CVE-2026-100863
Heym before 0.0.91 SSRF via image fetching and IPv6 validation
H
Patch status unknownEPSS %0
6.9
CVE-2026-100862
heym before 0.0.91 Multiple Secrets Plaintext Storage
H
Patch status unknownEPSS %0
5.3
CVE-2026-100861
heym before 0.0.105 SSRF via credential-controlled base URLs
H
Patch status unknownEPSS %0
6.8
CVE-2026-100860
heym before 0.0.105 Authentication Bypass via Redis Node
H
Patch status unknownEPSS %0
7.1
CVE-2026-100859
Heym before 0.0.106 Credential Exfiltration via URL Override
H
Patch status unknownEPSS %0