HIGH7.3PyPI
GHSA-238w-f66p-w349· CVE-2026-9353, PYSEC-2026-2509hermes-agent has an Injection issue
Modified: 7/13/2026
package
PyPI/hermes-agent
pkg:pypi/hermes-agent
MEDIUM6.3PyPI
GHSA-33qv-c5qm-799v· CVE-2026-10223, PYSEC-2026-3575hermes-agent has an Injection issue
Modified: 8/4/2026
HIGH7.5PyPI
GHSA-4pqm-j46f-795x· CVE-2026-53869, PYSEC-2026-2510Hermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
Modified: 7/13/2026
MEDIUM5.5PyPI
GHSA-99f9-j8r3-p853· CVE-2026-53870, PYSEC-2026-2511Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-cv5c-mh6j-wvp9· CVE-2026-9369, PYSEC-2026-2512hermes-agent has an Incorrect Comparison
Modified: 7/13/2026
MEDIUM5.6PyPI
GHSA-mv8x-fg99-32mf· CVE-2026-10222, PYSEC-2026-2513hermes-agent has an Injection issue
Modified: 7/28/2026
HIGH7.3PyPI
GHSA-pgp4-xr4j-h5cg· CVE-2026-9366, PYSEC-2026-2514hermes-agent has an Injection issue
Modified: 7/13/2026
MEDIUM5.3PyPI
GHSA-pmqc-57g8-c22c· CVE-2026-10224, PYSEC-2026-3576hermes-agent has an Uncontrolled Resource Consumption issue
Modified: 8/4/2026
HIGH7.3PyPI
GHSA-wm96-9gfh-vvgq· CVE-2026-9368, PYSEC-2026-2515hermes-agent has a sandbox issue
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-xq8w-9jvx-gm3v· CVE-2026-10221, PYSEC-2026-3577hermes-agent has an Injection issue
Modified: 8/4/2026
HIGH7.3PyPI
PYSEC-2026-2509· CVE-2026-9353, GHSA-238w-f66p-w349hermes-agent has an Injection issue
Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2026-2510· CVE-2026-53869, GHSA-4pqm-j46f-795xHermes Agent contains a DNS rebinding vulnerability in WebSocket endpoints that allows remote attackers to bypass Host and Origin validation
Modified: 7/13/2026
MEDIUM5.5PyPI
PYSEC-2026-2511· CVE-2026-53870, GHSA-99f9-j8r3-p853Hermes Agent creates response_store.db and webhook_subscriptions.json with world-readable permissions (mode 0o644)
Modified: 7/13/2026
MEDIUM5.3PyPI
PYSEC-2026-2512· CVE-2026-9369, GHSA-cv5c-mh6j-wvp9hermes-agent has an Incorrect Comparison
Modified: 7/13/2026
MEDIUM5.6PyPI
PYSEC-2026-2513· CVE-2026-10222, GHSA-mv8x-fg99-32mfhermes-agent has an Injection issue
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2514· CVE-2026-9366, GHSA-pgp4-xr4j-h5cghermes-agent has an Injection issue
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2515· CVE-2026-9368, GHSA-wm96-9gfh-vvgqhermes-agent has a sandbox issue
Modified: 7/13/2026
MEDIUM6.3PyPI
PYSEC-2026-3575· CVE-2026-10223, GHSA-33qv-c5qm-799vhermes-agent has an Injection issue
Modified: 8/4/2026
MEDIUM5.3PyPI
PYSEC-2026-3576· CVE-2026-10224, GHSA-pmqc-57g8-c22chermes-agent has an Uncontrolled Resource Consumption issue
Modified: 8/4/2026
HIGH7.3PyPI
PYSEC-2026-3577· CVE-2026-10221, GHSA-xq8w-9jvx-gm3vhermes-agent has an Injection issue
Modified: 8/4/2026