CVE-2026-100858

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user-created credentials webhookurl / flaresolverrurl using an unguarded HTTP client, bypassing the SSRF egress guard that...

CVE-2026-100858

The heym software, in versions prior to 0.0.109 , is vulnerable to a Server-Side Request Forgery (SSRF) in the Slack, Discord, and Crawler workflow nodes . The root cause is the use of an unguarded HTTP client that issues requests to URLs provided in user-created credentials (specifically webhook...

EUVD-2026-87823

heym before 0.0.109 contains a server-side request forgery vulnerability in the Slack, Discord, and Crawler workflow nodes. These nodes issue HTTP requests to URLs taken from user-created credentials webhookurl / flaresolverrurl using an unguarded HTTP client, bypassing the SSRF egress guard that...