CVE-2026-67543

Prior to version 0.0.70 , the heym platform suffered from insufficient isolation for untrusted code. While the python_tool_executor.py component correctly mandates a Docker sandbox, the sibling component, skill_python_executor.py, executes skill Python via a local backend subprocess without Docke...