homeassistant vulnerabilities (PyPI)
12 vulnerabilities.
-
homeassistantPyPI Home Assistant: mDNS Server-Side Request Forgery 5.4 Medium -
homeassistantPyPI Home Assistant: XSS in Statistics Graph Card 9.3 Critical -
homeassistantPyPI Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload 9.0 Critical -
homeassistantPyPI Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN 7.6 High -
homeassistantPyPI Home Assistant has stored XSS in history-graphs 7.3 High -
homeassistantPyPI Home Assistant has stored XSS in Map-card through malicious device name 7.3 High -
homeassistantPyPI Home Assistant Core before is vulnerable to Directory Traversal 4.0 Medium -
homeassistantPyPI Home Assistant vulnerable to Stored XSS in Energy dashboard from Energy Entity Name 8.5 High -
homeassistantPyPI SSL validation for outgoing requests in Home Assistant Core and used libs not correct 7.0 High -
homeassistantPyPI User accounts disclosed to unauthenticated actors on the LAN 4.3 Medium -
homeassistantPyPI Account takeover via auth_callback login in Home Assistant Core 4.3 Medium -
homeassistantPyPI Home Assistant information disclosure vulnerability 7.5 High