Github.Com Hashicorp-Forge Hermes vulnerabilities

1 known vulnerability affecting github.com/hashicorp-forge_hermes.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-1293HIGHCVSS 8.2≥ 0, < 0.5.02025-02-20

CVE-2025-1293 [HIGH] CWE-1390 Hermes improperly validates a JWT Hermes improperly validates a JWT Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.