PT-2026-99483

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.91 Description Two server-side request forgery SSRF gaps exist in the software. First, the LLM image-edit input loader load image bytes fetches HTTP/HTTPS URLs provided by the caller using a bare httpx.get, which onl...