Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3576
  • PyPI/hermes-agent
hermes-agent has an Uncontrolled Resource Consumption issue 04 Aug
  • No fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-3575
  • PyPI/hermes-agent
hermes-agent has an Injection issue 04 Aug
  • Fix available
  • Severity - 2.1 (Low)
PYSEC-2026-3577
  • PyPI/hermes-agent
hermes-agent has an Injection issue 04 Aug
  • No fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2510
  • PyPI/hermes-agent
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation 13 Jul
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2026-2511
  • PyPI/hermes-agent
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644) 13 Jul
  • Fix available
  • Severity - 6.8 (Medium)
PYSEC-2026-2513
  • PyPI/hermes-agent
hermes-agent has an Injection issue 13 Jul
  • Fix available
  • Severity - 2.9 (Low)
PYSEC-2026-2512
  • PyPI/hermes-agent
hermes-agent has an Incorrect Comparison 13 Jul
  • Fix available
  • Severity - 1.9 (Low)
PYSEC-2026-2515
  • PyPI/hermes-agent
hermes-agent has a sandbox issue 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2514
  • PyPI/hermes-agent
hermes-agent has an Injection issue 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2509
  • PyPI/hermes-agent
hermes-agent has an Injection issue 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-4pqm-j46f-795x
  • PyPI/hermes-agent
Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation 17 Jun
  • Fix available
  • Severity - 8.7 (High)
GHSA-99f9-j8r3-p853
  • PyPI/hermes-agent
Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644) 17 Jun
  • Fix available
  • Severity - 6.8 (Medium)
GHSA-33qv-c5qm-799v
  • PyPI/hermes-agent
hermes-agent has an Injection issue 01 Jun
  • Fix available
  • Severity - 2.1 (Low)
GHSA-pmqc-57g8-c22c
  • PyPI/hermes-agent
hermes-agent has an Uncontrolled Resource Consumption issue 01 Jun
  • No fix available
  • Severity - 5.5 (Medium)
GHSA-mv8x-fg99-32mf
  • PyPI/hermes-agent
hermes-agent has an Injection issue 01 Jun
  • Fix available
  • Severity - 2.9 (Low)
GHSA-xq8w-9jvx-gm3v
  • PyPI/hermes-agent
hermes-agent has an Injection issue 01 Jun
  • No fix available
  • Severity - 5.5 (Medium)