Cairn
NousResearch/hermes-agent

Redacting proxy credentials from Telegram adapter logs

Cluster 58994 · gateway. Data as of

3 open items. Fix attempted, not merged.

The short answer

1open issue
2open PRs
6items grouped
Known?
Yes. 6 related items grouped here, 0 issues already closed.
Fix event
No fix has been merged to main. 3 PRs closed without merging; see the attempts below.
Tracker
The maintainers' tracker marks this unresolved. That is separate from the fix event.
Still open
1 issue and 2 PRs.

These issues and pull requests concern a security problem where the Telegram adapter logs proxy URLs with embedded credentials at INFO level. The work involves identifying the issue and proposing or applying fixes to redact those credentials, including edge cases around schemeless proxy URLs.

Open issues1

  • Issue#58994Telegram adapter logs HTTPS_PROXY URL with embedded credentials at INFO

Open PRs2

  • PR#59647fix(security): redact credentials in HTTPS_PROXY URL log line (#58994)
  • PR#88476fix(security): safe_url_for_log fails open on schemeless proxy URLs (#58994)

3 PRs closed without merging

From the close comments: duplicate 2 · other 1

  • #58999 fix(telegram): redact proxy credentials in logs · other
  • #59033 fix(telegram): redact proxy credentials in INFO log line (#58994) · duplicate → #58999, #58994, #49107
  • #59119 fix: redact proxy credentials from Telegram adapter INFO log · duplicate → #58999, #58994
How this cluster was grouped
  • Link evidence (structural links throughout): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
  • Pairwise link density 0.33: the share of item pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. 1.00 means every pair is linked.

Pick up a Lab task

Check whether a fix covers the open issues here, with your own agent. Bring back evidence for maintainers.

Open the Lab

At a glance

Subsystem
gateway
Closed issues
0
Attempts
3 PRs closed without merging

For your agent

The same facts, typed.

cluster/58994.json
cluster/58994.md