Skip to content

Hephaestus

v0.7.20 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo AI Agents & Assistants
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

a2a agent agent-framework agent-os-desktop agent-skills agentic-ai
+13 more
agentic-workflow agentos agents agents-team agentshub ai-agents autonomous-agents llm llm-agents llm-tools mcp multi-agent-systems ochestration

Summary

AI summary

Removes Mason-local package bucket label leakage from multiple components.

Full changelog

v0.7.20 - 2026-06-22

  • Aligns Hub-facing language around Agents, Teams, and Plugins so public surfaces show invocation credits separately from downloadable packages.
  • Keeps local trusted routing-card behavior as the local-first Network trust path while upload and Hub publication security review remain separate gates.
  • Removes Mason-local package bucket label leakage from routing docs, benchmarks, adapter skills, CLI tier choices, ontology contracts, and mirrored runtime packages.
  • Tightens public safety scanning so real local filesystem paths are still blocked without flagging runtime redaction regex literals.

Verification: 75 passed; scripts/verify-package.sh; scripts/verify-one-touch-install.sh; scripts/sync-adapters.sh --check; public safety check.

Breaking Changes

  • Removes Mason-local package bucket label leakage from routing docs, benchmarks, adapter skills, CLI tier choices, ontology contracts, and mirrored runtime packages.

Security Fixes

  • Tightens public safety scanning to block real local filesystem paths without flagging runtime redaction regex literals.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Hephaestus

Get notified when new releases ship.

Sign up free

About Hephaestus

Open Agent OS for Claude Code, Codex, and Cursor with a meta-agent builder, A2A Hub routing, local ontology, and memory/security gates. Apache-2.0.

All releases →

Related context

Beta — feedback welcome: [email protected]