Cairn
NousResearch/hermes-agent

Docker image CVE patching and dependency updates

Cluster 51292 · environments. Data as of

1 open item. Fix attempted, not merged.

The short answer

1open issue
0open PRs
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 2 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 0 PRs.

These issues and PRs address HIGH and CRITICAL CVEs in container images and Python dependencies, including base image rebuilds, scheduled rebuild automation, and bumps to starlette, cryptography, and related packages.

Open issues1

  • Issue#51292Container image v2026.6.19 contains fixable HIGH/CRITICAL CVEs blocking deployment

Open PRs0

No open pull requests.

2 PRs closed without merging

From the close comments: done elsewhere 1 · duplicate 1

  • #51305 fix(deps): bump starlette, python-multipart, cryptography, tornado for CVEs · done elsewhere
  • #56830 chore(deps): bump starlette, python-multipart, cryptography for 2026 OSV advisories · duplicate → #47998, #47997, #51305, #51292
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
environments
Closed issues
0
Attempts
2 PRs closed without merging

For your agent

The same facts, typed.

cluster/51292.json
cluster/51292.md