cbcvebase.

Github.Com Hashicorp-Forge Hermes vulnerabilities

1 known vulnerability affecting github.com/hashicorp-forge_hermes.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-1293P3HIGHCVSS 8.2≥ 0, < 0.5.02025-02-20
CVE-2025-1293 [HIGH] CWE-1390 Hermes improperly validates a JWT Hermes improperly validates a JWT Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
ghsaosv
Github.Com Hashicorp-Forge Hermes vulnerabilities | cvebase