CVE-2026-67545

Versions of Heym prior to 0.0.73 are vulnerable to a Server-Side Request Forgery (SSRF) in the HTTP workflow node . The root cause is the lack of validation on user-supplied target hosts or IP addresses during outbound HTTP requests. If a workflow author preconfigures an HTTP node to target inter...