{"repo":"NousResearch/hermes-agent","public_id":"71559","display_label":"Relay media URL origin validation security fixes","summary":"A bug was identified where relay media URL detection incorrectly treated any /relay/media/ path as authenticated connector media regardless of origin. Multiple fixes were made to restrict and verify origin in relay media URL detection.","subsystem":"gateway","counts":{"members":4,"open_issues":1,"open_issues_distinct":1,"open_prs":2,"closed_issues":0,"merged_prs":0,"attempt_prs":3},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[],"members":[{"kind":"issue","number":71559,"title":"[Bug]: Relay media URL detection treats any /relay/media/ path as authenticated connector media","url":null,"state":"open"},{"kind":"pr","number":71567,"title":"fix(relay): bind media auth to connector origin","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"4591001c4bd2","number":0},{"kind":"pr","value":"#71559","number":71559},{"kind":"pr","value":"#72460","number":72460},{"kind":"pr","value":"#73214","number":73214},{"kind":"pr","value":"#71567","number":71567},{"kind":"pr","value":"#374151","number":374151}],"category":"partial_fix","implication":"needs_llm"},"merged":false},{"kind":"pr","number":72460,"title":"fix(gateway): restrict relay media URL detection to same-origin (#71559)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#71567","number":71567},{"kind":"pr","value":"#71559","number":71559}],"category":"duplicate_of","implication":"duplicate"},"merged":false},{"kind":"pr","number":73214,"title":"fix(gateway): verify origin in relay media URL detection (#71559)","url":null,"state":"open","close_reason":{"refs":[{"kind":"commit","value":"9b645516bddf","number":0},{"kind":"pr","value":"#71559","number":71559},{"kind":"pr","value":"#72460","number":72460},{"kind":"pr","value":"#73214","number":73214},{"kind":"pr","value":"#71567","number":71567},{"kind":"pr","value":"#374151","number":374151}],"category":"partial_fix","implication":"needs_llm"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}