softwarepub vulnerabilities

Products

• hermes 1

Latest softwarepub CVEs

Newest publication first

1. CVE-2026-22798 hermes's raw options logging may disclose secrets passed in via subcommand options argument

   Published 2026-01-12

   Medium·CVSS 5.9

   hermes is an implementation of the HERMES workflow to automatize software publication with rich metadata. From 0.8.1 to before 0.9.1, hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form. If users provide sensitive data such as API t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.