Cairn

Unbounded HTTP response body reads need caps

NousResearch/hermes-agent · cluster 54757 · hermes cli

Data as of

4 open items. Fix attempted, not merged.

The short answer

2open issues
2open PRs
6items grouped
Known?
Yes. 6 related items grouped here, 1 issue already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
2 issues and 2 PRs.

These issues and PRs concern HTTP response bodies being read without size limits in CLI enrollment and billing client code. Fixes involve bounding those reads to prevent uncapped memory consumption.

Open issues2

  • Issue#54757CLI enrollment helpers read JSON response bodies without a cap
  • Issue#54780Nous billing client reads response bodies without a cap

Open PRs2

  • PR#54758fix(cli): bound enrollment response reads
  • PR#54781fix(nous): bound billing response reads

1 PR closed without merging

From the close comments: other 1

  • #56501 fix(cli): bound enrollment response reads · other → #54758
Closed issues · 1
  • Closed#54953Nous billing client reads portal JSON responses without a body cap
How this cluster was grouped
  • Link evidence (partly structural links): some members are connected by structural evidence (shared changed files, or a closing/superseded reference); the rest are joined by an automated relevance judgement over their text.
  • Members outside that structural core may belong to a different underlying problem.
  • Pairwise link density 0.25: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
hermes cli
Closed issues
1
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/54757.json
cluster/54757.md