{"repo":"NousResearch/hermes-agent","public_id":"8733","display_label":"WeCom/gateway file:// URL path traversal fixes","summary":"A reported vulnerability and multiple fix attempts addressing arbitrary file read via file:// URL path traversal in the WeCom adapter and gateway. The fixes focus on sandboxing and validating local media file paths to restrict access.","subsystem":"gateway","counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":0,"attempt_prs":2},"landed_fix":null,"resolution":{"state":"unresolved","by":null},"freshness":{"state":"never_verified","last_verified_at":null,"is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[],"members":[{"kind":"issue","number":8733,"title":"Arbitrary File Read via `file://` URL Path Traversal in WeCom Adapter","url":null,"state":"closed"},{"kind":"pr","number":8747,"title":"fix(gateway): validate file:// media paths to prevent path traversal","url":null,"state":"closed","close_reason":{"category":"silent_close","implication":"active"},"merged":false},{"kind":"pr","number":26424,"title":"fix(wecom): bound outbound local media paths","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#8733","number":8733}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false}],"trust":{"default_tier":"verified","includes_suggested":false}}