homeassistant vulnerabilities

Open-source home automation platform running on Python 3.

2025.10.4

10 years ago

2 days ago

Known vulnerabilities in the homeassistant package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Cross-site Scripting (XSS)	[2025.1.0,2025.10.2)
H Improper Validation of Certificate with Host Mismatch	[2023.9.0b0,2024.1.6)
H Cross-site Request Forgery (CSRF)	[,2023.9.0b0)
C Cross-site Scripting (XSS)	[,2023.9.0)
M Access Restriction Bypass	[,2023.9.0b0)
M Server-side Request Forgery (SSRF)	[,2023.9.0)
M Information Exposure	[,2023.12.3)
M Information Exposure Through Sent Data	[,2023.9.0)
H Race Condition	[,0.83.1)
M Authentication Bypass	[,2023.3.0)
M Information Exposure	[,0.67.0)
M Man-in-the-Middle (MitM)	[0.56,0.73.2)

1495 VERSIONS IN TOTAL See all versions