Server-Side Request Forgery Vulnerabilities in Heym Products by Heym

CVE-2026-100863

What is CVE-2026-100863?

Heym versions 0.0.90 and earlier are susceptible to two critical server-side request forgery (SSRF) vulnerabilities. The first vulnerability arises from an inadequately secured LLM image-edit input loader, which employs a basic HTTP request method that fails to ensure robust egress restriction. This creates a risk where an API caller could manipulate the image URL input, allowing unintended HTTP requests to internal resources like loopback addresses or cloud metadata. The second issue pertains to inadequate IPv6 address validation, which permits certain IPv6 address formats to pass through initial security checks, potentially leading to the exposure of private network resources. The vulnerability has been addressed in version 0.0.91, which implements enhanced security measures such as routing through a protected client and rejecting risky address formats.

References