How many hashicorp-forge hermes CVEs are in CISA KEV?

None of hashicorp-forge hermes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of hashicorp-forge hermes are affected?

6 distinct hashicorp-forge hermes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in hashicorp-forge hermes CVEs?

hashicorp-forge hermes's CVEs most often map to these CWE weakness types: CWE-1390 (Weak Authentication).

What is the average severity of hashicorp-forge hermes CVEs?

The average CVSS base score across hashicorp-forge hermes's scored CVEs is 8.2.

hashicorp-forge hermes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: hashicorp-forge hermes vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

hashicorp-forge hermes Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

hashicorp-forge hermes has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.2.

This page aggregates every publicly disclosed vulnerability (CVE) affecting hashicorp-forge hermes, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of hashicorp-forge hermes's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of hashicorp-forge hermes's CVEs are currently listed in CISA's KEV catalog.

Public exploits

No hashicorp-forge hermes CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every hashicorp-forge hermes version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.0.11 CVE
0.1.01 CVE
0.2.01 CVE
0.3.01 CVE
0.4.01 CVE

Fixed in

caa1b990d237b39a99643f84ec5cbdbc6e086f2b1 CVE

Find a version

1 CVE

Sort

HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass
CVE-2025-1293
Patch
CWE-1390
High · CVSS 8.2
EPSS 0.3% (27th pct)2025-02-20

Common weakness types

The CWE weakness categories most often found in hashicorp-forge hermes CVEs. Follow any weakness for its full explanation.

CWE-1390Weak Authentication1 CVE

Other hashicorp-forge products

Browse vulnerabilities for other products by hashicorp-forge.

github.com/hashicorp-forge/hermes1 CVEs

All hashicorp-forge vulnerabilities

Frequently asked questions

Common questions about hashicorp-forge hermes vulnerabilities.

How many CVEs does hashicorp-forge hermes have?: hashicorp-forge hermes has 1 published CVE records since 2025.
How many hashicorp-forge hermes CVEs are in CISA KEV?: None of hashicorp-forge hermes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for hashicorp-forge hermes vulnerabilities?: No hashicorp-forge hermes CVEs currently have a tracked public exploit in this dataset.
Which versions of hashicorp-forge hermes are affected?: 6 distinct hashicorp-forge hermes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in hashicorp-forge hermes CVEs?: hashicorp-forge hermes's CVEs most often map to these CWE weakness types: CWE-1390 (Weak Authentication).
What is the average severity of hashicorp-forge hermes CVEs?: The average CVSS base score across hashicorp-forge hermes's scored CVEs is 8.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track hashicorp-forge hermes vulnerabilities

Monitor new hashicorp-forge hermes vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing