2 matches found
CVE-2026-100862 heym before 0.0.91 Multiple Secrets Plaintext Storage
heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...
6.9CVSS6AI score
SaveExploits0References4
CVE-2026-100862: Cleartext Storage of Sensitive Information
heym, a workflow automation platform, stores and returns multiple capability secrets in plaintext in versions prior to 0.0.91. Affected secrets include webhook header-auth values returned in cleartext by GET /api/workflows/id and persisted unsanitized into execution history, MCP API keys stored a...
6.9CVSS5.9AI score0.00194EPSS
SaveExploits0References2
20