esphome vulnerabilities (PyPI)
6 vulnerabilities.
-
esphomePyPI ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component 1.7 Low -
esphomePyPI ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header 8.1 High -
esphomePyPI ESPHome vulnerable to Authentication bypass via Cross site request forgery 8.1 High -
esphomePyPI ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API 6.5 Medium -
esphomePyPI ESPHome remote code execution via arbitrary file write 7.2 High -
esphomePyPI web_server allows OTA update without checking user defined basic auth username & password 7.5 High