Cairn
NousResearch/hermes-agent

Gateway sanitize auth error message leaks

Cluster 55071 · gateway. Data as of

2 open items. Fix attempted, not merged.

The short answer

1open issue
1open PR
3items grouped
Known?
Yes. 3 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 1 PR closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 1 PR.

These issues and PRs address a specific problem where unexpected-status authentication error messages (e.g., 401 Unauthorized) were leaking through the gateway into chat output. Fixes involve sanitizing agent error messages and validating webhook arguments to prevent exposure of internal auth envelopes.

Open issues1

  • Issue#55071Gateway chat sanitizer leaks unexpected-status 401 auth envelopes

Open PRs1

  • PR#55072fix(gateway): sanitize unexpected-status auth errors

1 PR closed without merging

From the close comments: duplicate 1

  • #55199 fix: sanitize 'unexpected status 401 Unauthorized' in gateway chat output · duplicate → #55072, #55071
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.67: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
gateway
Closed issues
0
Attempts
1 PR closed without merging

For your agent

The same facts, typed.

cluster/55071.json
cluster/55071.md