pypi

homeassistant

22 Total advisories

22 Vulnerabilities

0 Malware

Dependency scanning

Check whether homeassistant is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

homeassistant

Vulnerabilities

Home Assistant: XSS in Statistics Graph Card

Home Assistant: mDNS Server-Side Request Forgery

Home Assistant vulnerable to account takeover via auth_callback login

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN

Home Assistant has stored XSS in Map-card through malicious device name

Home Assistant has stored XSS in history-graphs

Home Assistant has stored XSS in history-graphs

Home Assistant has stored XSS in Map-card through malicious device name

Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name

User accounts disclosed to unauthenticated actors on the LAN

Home Assistant does not correctly validate SSL for outgoing requests in core and used libs

Home Assistant Core before is vulnerable to Directory Traversal

Home Assistant does not correctly validate SSL for outgoing requests in core and used libs

Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name

User accounts disclosed to unauthenticated actors on the LAN

Home Assistant Core before is vulnerable to Directory Traversal

CVE-2026-54317

CVE-2018-21019

Home Assistant information disclosure vulnerability

CVE-2023-41893

Browse more PyPI advisories

Start Securing