Fatihkaratash

**Name of the Vulnerable Software and Affected Versions** heym versions prior to 0.0.105 **Description** The Redis workflow node in `backend/app/services/node execution/nodes/redis node.py` fails to properly handle the result of credential authorization lookups. When the ` get accessible credential()` function returns None—occurring if the credential ID is missing or the user lacks authorization—or if the credential has an empty configuration or lacks a `redis host` value, the system defaults to connecting to localhost:6379 without a password. This allows an authenticated workflow author to obtain read/write access to any Redis instance listening on the backend loopback interface by providing a deleted or unauthorized credential ID. **Recommendations** Update heym to version 0.0.105 or later.

**Name of the Vulnerable Software and Affected Versions** heym versions prior to 0.0.105 **Description** Authenticated users can bypass Server-Side Request Forgery (SSRF) protections—a flaw where an attacker induces a server to make requests to an unintended location—due to a failure in applying egress guards to integration services that utilize credential-supplied base URLs. This allows attackers to configure credentials pointing to loopback, private, or cloud-metadata addresses to read internal service responses returned as workflow node output. **Recommendations** Update to version 0.0.105 or later.