Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:heym:heym:*:*:*:*:*:*:*:*

2 briefs RSS
high advisory

Privilege Escalation in Heym Workflow Execution

Heym versions 0.0.55 through 0.0.120 contain a privilege escalation vulnerability allowing shared collaborators to exfiltrate workflow credentials by overwriting error handlers.

Heym
1t 1c
high advisory

Sandbox Escape in heym Expression Engine

The heym expression engine before version 0.0.91 is vulnerable to a sandbox escape via the DotList map/filter and fallback resolver, allowing authenticated users to achieve arbitrary Python code execution.

heym +1 sandbox-escape code-execution expression-engine web-vulnerability rce authentication-bypass plaintext-credentials
2t 1c