https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:08:59.609228+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-84207 fkie_cve-2026-84207 2026-09-28T08:09:01.984124+00:00

Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket Trigger node.

 https://vulnerability.circl.lu/vuln/ghsa-488w-5jv5-7w7q GHSA-488w-5jv5-7w7q 2026-09-28T08:09:01.984236+00:00

Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticated users to connect to internal services. Attackers can craft workflow nodes with arbitrary URLs and headers to reach internal services and read responses from the WebSocket Trigger node.