Skip to content
OpenAdvisories

Vendor

softwarepub

1 known vulnerabilities.

Products

hermes 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-22798

    hermes's raw options logging may disclose secrets passed in via subcommand options argument

    hermes is an implementation of the HERMES workflow to automatize software publication with rich metadata. From 0.8.1 to before 0.9.1, hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form. If users provide sensiti…

    softwarepub hermes hermes PyPI