esphome
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header | esphome | PyPI | High | Fix reported | |
| ESPHome vulnerable to remote code execution via arbitrary file write | esphome | PyPI | High | Fix reported | |
| ESPHome vulnerable to Authentication bypass via Cross site request forgery | esphome | PyPI | High | Fix reported | |
| esphome vulnerable to stored Cross-site Scripting in edit configuration file API | esphome | PyPI | Medium | Fix reported | |
| ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component | esphome | PyPI | Medium | Fix reported | |
| Basic auth bypass in esphome | esphome | PyPI | High | Fix reported |