{"repo":"NousResearch/hermes-agent","public_id":"54808","display_label":"Cap HTTP JSON response body read sizes","summary":"These issues and PRs concern dashboard HTTP JSON helpers that read response bodies without an upper bound limit. The work involves adding caps or bounds to prevent unbounded response body reads.","subsystem":"dashboard","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":133938,"merged_at":"2026-10-06T16:28:56+00:00"},"resolution":{"state":"resolved","by":"pr-133938"},"freshness":{"state":"verified","last_verified_at":"2026-10-06T16:28:56+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":54808,"pr_number":133938,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-10-06T16:28:56+00:00"},{"issue_number":55121,"pr_number":133938,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-10-06T16:28:56+00:00"}],"members":[{"kind":"issue","number":54808,"title":"Dashboard HTTP JSON helpers read response bodies without a cap","url":null,"state":"closed"},{"kind":"pr","number":54809,"title":"fix(web): bound dashboard JSON responses","url":null,"state":"closed","close_reason":{"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":133938,"title":"fix(dashboard+auth): cap HTTP JSON response body reads","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["hermes_cli/web_routers/audio.py","hermes_cli/web_server_gateway.py","plugins/dashboard_auth/_shared.py","plugins/dashboard_auth/self_hosted/__init__.py","tests/hermes_cli/test_audio_router_scope.py","tests/hermes_cli/test_web_server.py","tests/hermes_cli/test_web_server_gateway_health.py","tests/plugins/dashboard_auth/test_nous_provider.py","tests/plugins/dashboard_auth/test_self_hosted_provider.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}