Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2477048
AlmaLinux
6032
Alpaquita
16465
Alpine
4658
Android
3706
Azure Linux
18601
BellSoft Hardened Containers
799
Bitnami
9652
Chainguard
1223402
CleanStart
6465
CRAN
14
crates.io
2775
Debian
69734
Echo
8256
GHC
3
GIT
111039
GitHub Actions
55
Go
9442
Hackage
33
Hex
372
Julia
1713
Linux
30192
Mageia
6251
Maven
7077
MinimOS
168051
npm
229553
NuGet
1881
opam
29
openEuler
8900
openSUSE
14715
OSS-Fuzz
4021
Packagist
7140
Pub
11
PyPI
25605
Red Hat
23683
Rocky Linux
4403
Root
19576
RubyGems
5395
SUSE
23653
SwiftURL
61
TuxCare
10240
Ubuntu
66554
VSCode
21
Wolfi
326820
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3576
PyPI/hermes-agent
hermes-agent has an Uncontrolled Resource Consumption issue
04 Aug
No fix available
Severity - 5.5 (Medium)
PYSEC-2026-3575
PyPI/hermes-agent
hermes-agent has an Injection issue
04 Aug
Fix available
Severity - 2.1 (Low)
PYSEC-2026-3577
PyPI/hermes-agent
hermes-agent has an Injection issue
04 Aug
No fix available
Severity - 5.5 (Medium)
PYSEC-2026-2510
PyPI/hermes-agent
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
13 Jul
Fix available
Severity - 8.7 (High)
PYSEC-2026-2511
PyPI/hermes-agent
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
13 Jul
Fix available
Severity - 6.8 (Medium)
PYSEC-2026-2513
PyPI/hermes-agent
hermes-agent has an Injection issue
13 Jul
Fix available
Severity - 2.9 (Low)
PYSEC-2026-2512
PyPI/hermes-agent
hermes-agent has an Incorrect Comparison
13 Jul
Fix available
Severity - 1.9 (Low)
PYSEC-2026-2515
PyPI/hermes-agent
hermes-agent has a sandbox issue
13 Jul
Fix available
Severity - 5.5 (Medium)
PYSEC-2026-2514
PyPI/hermes-agent
hermes-agent has an Injection issue
13 Jul
Fix available
Severity - 5.5 (Medium)
PYSEC-2026-2509
PyPI/hermes-agent
hermes-agent has an Injection issue
13 Jul
Fix available
Severity - 5.5 (Medium)
GHSA-4pqm-j46f-795x
PyPI/hermes-agent
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
17 Jun
Fix available
Severity - 8.7 (High)
GHSA-99f9-j8r3-p853
PyPI/hermes-agent
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
17 Jun
Fix available
Severity - 6.8 (Medium)
GHSA-33qv-c5qm-799v
PyPI/hermes-agent
hermes-agent has an Injection issue
01 Jun
Fix available
Severity - 2.1 (Low)
GHSA-pmqc-57g8-c22c
PyPI/hermes-agent
hermes-agent has an Uncontrolled Resource Consumption issue
01 Jun
No fix available
Severity - 5.5 (Medium)
GHSA-mv8x-fg99-32mf
PyPI/hermes-agent
hermes-agent has an Injection issue
01 Jun
Fix available
Severity - 2.9 (Low)
GHSA-xq8w-9jvx-gm3v
PyPI/hermes-agent
hermes-agent has an Injection issue
01 Jun
No fix available
Severity - 5.5 (Medium)
Load more...
PyPI - OSV