← All credits

mbakgun

9 vulnerability records and advisories credit this contributor.

CVE-2026-105396

Heym before v0.0.112 HITL Review Token Leak via Spoofable Origin Header

CVE-2026-100862

heym before 0.0.91 Multiple Secrets Plaintext Storage

CVE-2026-100859

Heym before 0.0.106 Credential Exfiltration via URL Override

CVE-2026-100858

heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes

CVE-2026-101049

Heym before 0.0.53 Slack Webhook Signature Verification Bypass

CVE-2026-101050

Heym before 0.0.53 Authentication Bypass via Telegram Webhook

CVE-2026-100865

Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape

CVE-2026-100864

heym before 0.0.91 Remote Code Execution via Expression Engine

CVE-2026-100861

heym before 0.0.105 SSRF via credential-controlled base URLs