Lucene search
+L

2 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•27 views

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Thanks, @thunze for reporting this!hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form since https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1 in:...

5.9CVSS5.9AI score0.00175EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/01/13 8:30 p.m.•20 views

GHSA-JM5J-JFRM-HM23 hermes's raw options logging may disclose secrets passed in via subcommand options argument

Thanks, @thunze for reporting this! hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form since https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1 in:...

5.9CVSS6.5AI score0.00175EPSS
SaveExploits0References5
Rows per page
Query Builder