Cairn
NousResearch/hermes-agent

Validate lock.json sha256 digest shape before using as store path

Cluster 138359 · hermes cli. Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These members concern the package manager (pm) accepting a lock.json sha256 value that is not shaped like a digest, which could then be used to name a store path. One item is a security report that also mentions facts.json env injection and a downloader loopback gate bypass, while the other two are fixes focused on rejecting malformed digests.

Open issues1

  • Issue#138359[Security] pm: lock.json sha256 not shape-validated -> path traversal to arbitrary rmtree (verified) + facts.json env injection + downloader loopback gate bypass

Open PRs2

  • PR#138370fix(pm): refuse an artifact digest that is not one before it names a store path
  • PR#138376fix(pm): fail closed on off-shape lock sha256 before it becomes a store path
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
hermes cli
Closed issues
0
Attempts
0 PRs closed without merging

For your agent

The same facts, typed.

cluster/138359.json
cluster/138359.md