{"repo":"NousResearch/hermes-agent","public_id":"54777","display_label":"Cap unbounded response body reads in Nous account lookup","summary":"These issues and PRs address a vulnerability where Nous Portal account lookup and refresh requests read HTTP response bodies without any size limit. The fixes introduce a cap on response body reads to prevent unbounded memory consumption.","subsystem":"hermes_cli","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":1,"closed_issues":1,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5599999999999999},"fix_edges":[],"members":[{"kind":"issue","number":54777,"title":"Nous account lookup reads Portal response bodies without a cap","url":null,"state":"open"},{"kind":"issue","number":56507,"title":"Nous Portal account refresh reads response bodies without a cap","url":null,"state":"closed"},{"kind":"pr","number":54778,"title":"fix(nous): bound account response reads","url":null,"state":"open","close_reason":{"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":56509,"title":"fix(nous): cap response body size in account info fetch","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#54778","number":54778}],"category":"superseded_by_pr","implication":"superseded"},"merged":false,"is_fix_pr":true,"fix_tier":"suggested","fix_detail_withheld":true}],"trust":{"default_tier":"verified","includes_suggested":false}}