H
Heym
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 27, 2026 to present
7
Total CVEs
5
Critical+High
0
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
48/100
medium
🆕 7Fresh (<7d)📈 7 in Last 30 Days
Severity Distribution
Critical
0High
5Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
SSRF
3
2
Code Injection
1
Most Affected Products
1. Heym Heym7
Recent Vulnerabilities
See more →CVE-2026-101049
CVSS 8.3high
Heym before 0.0.53 Slack Webhook Signature Verification Bypass
Sep 27, 2026🔧 No Patch
CVE-2026-101050
CVSS 8.3high
Heym before 0.0.53 Authentication Bypass via Telegram Webhook
Sep 27, 2026🔧 No Patch
CVE-2026-100865
CVSS 8.7high
Heym before 0.0.53 Remote Code Execution via eval() Sandbox Escape
Sep 27, 2026🔧 No Patch
CVE-2026-100863
CVSS 5.3medium
Heym before 0.0.91 SSRF via image fetching and IPv6 validation
Sep 27, 2026🔧 No Patch
CVE-2026-100862
CVSS 6.9medium
heym before 0.0.91 Multiple Secrets Plaintext Storage
Sep 27, 2026🔧 No Patch
CVE-2026-100859
CVSS 7.1high
Heym before 0.0.106 Credential Exfiltration via URL Override
Sep 27, 2026🔧 No Patch
CVE-2026-100858
CVSS 7.6high
heym before 0.0.109 Server-Side Request Forgery via Workflow Nodes
Sep 27, 2026🔧 No Patch
Monitor Heym in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.