Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2026/01/13 8:30 p.m.19 views

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Thanks, @thunze for reporting this! hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form since https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1 in:...

5.9CVSS6.6AI score0.00154EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder