esphome-device-builder vulnerabilities (PyPI)

2 vulnerabilities.

• esphome-device-builder PyPI ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade CVE-2026-59178 Fix available 9.8 CriticalSeptember 14, 2026
• esphome-device-builder PyPI ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces CVE-2026-59177 Fix available 8.8 HighSeptember 9, 2026