CVE-2026-100863

Heym versions 0.0.90 and earlier contain two server-side request forgery SSRF egress gaps, both remediated in app/services/ssrfguard.py in 0.0.91. First, the LLM image-edit input loader loadimagebytes fetched caller-controlled HTTP/HTTPS URLs with a bare httpx.get, applying only a scheme check an...