What’s Vulnerable › Products

HashiCorp Hermes vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your HashiCorp Hermes version is affected

Latest HashiCorp Hermes vulnerabilities

• CVE-2025-1293 — HashiCorp Hermes Improperly Validates AWS ALB JWTs, which May Lead to Authentication Bypass (CVSS 8.2)