Skip to content

[Bug]: web workspace, agent-browser, ui-tui has npm vulnerabilities #79649

Description

@eabase

Bug Description

Running latest, + latest npm.

Why do I still get this?

# hermes doctor --fix

  Found 3 issue(s) to address:

  1. Browser tools (agent-browser) has 2 npm vulnerabilities
  2. web workspace has 3 npm vulnerabilities
  3. ui-tui workspace has 1 npm vulnerability

# npm audit fix

# npm audit
found 0 vulnerabilities

# npm-check
❤️  Your modules look amazing. Keep up the great work. ❤️

Steps to Reproduce

npm install -g npm@12.0.1
npm audit
npm audit fix
npm-check

hermes doctor
hermes doctor --fix

Expected Behavior

No vuln messages after fix

Actual Behavior

Get warnings

Affected Component

CLI (interactive chat)

Messaging Platform (if gateway-related)

N/A (CLI only)

Debug Report

n/a

Operating System

Debian Trixie

Python Version

Python 3.11.15

Hermes Version

Hermes Agent v0.20.0 (2026.8.3) · upstream 6564f31

Additional Logs / Traceback (optional)

Root Cause Analysis (optional)

No response

Proposed Fix (optional)

No response

Are you willing to submit a PR for this?

  • I'd like to fix this myself and submit a PR

Metadata

Metadata

Assignees

No one assigned

    Labels

    P2Medium — degraded but workaround existsbugcomp/cliCLI entry point, hermes_cli/, setup wizardsweeper:risk-compatibilitySweeper risk: may break existing users, config, migrations, defaults, or upgradestype/bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions