What are the most common weakness types in hashicorp-forge github.com/hashicorp-forge/hermes CVEs?

hashicorp-forge github.com/hashicorp-forge/hermes's CVEs most often map to these CWE weakness types: CWE-1390 (Weak Authentication).

hashicorp-forge github.com/hashicorp-forge/hermes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: hashicorp-forge github.com/hashicorp-forge/hermes vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

hashicorp-forge github.com/hashicorp-forge/hermes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

hashicorp-forge github.com/hashicorp-forge/hermes has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting hashicorp-forge github.com/hashicorp-forge/hermes, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of hashicorp-forge github.com/hashicorp-forge/hermes's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of hashicorp-forge github.com/hashicorp-forge/hermes's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No hashicorp-forge github.com/hashicorp-forge/hermes CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every hashicorp-forge github.com/hashicorp-forge/hermes version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 0.5.01 CVE

Fixed in

0.5.01 CVE

Find a version

1 CVE

Sort

HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass
CVE-2025-1293
Patch
CWE-1390
High · CVSS 8.2
EPSS 0.3% (27th pct)2025-02-20

Common weakness types

The CWE weakness categories most often found in hashicorp-forge github.com/hashicorp-forge/hermes CVEs. Follow any weakness for its full explanation.

CWE-1390Weak Authentication1 CVE

Other hashicorp-forge products

Browse vulnerabilities for other products by hashicorp-forge.

hermes1 CVEs

All hashicorp-forge vulnerabilities

Frequently asked questions

Common questions about hashicorp-forge github.com/hashicorp-forge/hermes vulnerabilities.

How many CVEs does hashicorp-forge github.com/hashicorp-forge/hermes have?: hashicorp-forge github.com/hashicorp-forge/hermes has 1 published CVE records since 2025.
How many hashicorp-forge github.com/hashicorp-forge/hermes CVEs are in CISA KEV?: None of hashicorp-forge github.com/hashicorp-forge/hermes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for hashicorp-forge github.com/hashicorp-forge/hermes vulnerabilities?: No hashicorp-forge github.com/hashicorp-forge/hermes CVEs currently have a tracked public exploit in this dataset.
Which versions of hashicorp-forge github.com/hashicorp-forge/hermes are affected?: 2 distinct hashicorp-forge github.com/hashicorp-forge/hermes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in hashicorp-forge github.com/hashicorp-forge/hermes CVEs?: hashicorp-forge github.com/hashicorp-forge/hermes's CVEs most often map to these CWE weakness types: CWE-1390 (Weak Authentication).
What is the average severity of hashicorp-forge github.com/hashicorp-forge/hermes CVEs?: The average CVSS base score across hashicorp-forge github.com/hashicorp-forge/hermes's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track hashicorp-forge github.com/hashicorp-forge/hermes vulnerabilities

Monitor new hashicorp-forge github.com/hashicorp-forge/hermes vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing