PT-2026-145530

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to version 0.0.70, heym hardens one untrusted-code path but not its sibling. The Python tool executor python tool executor.py treats user code as untrusted and mandates a Docker sandbox no...