ha-mcp
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ha-mcp has XSS via Unescaped HTML in OAuth Consent Form | ha-mcp | PyPI | Medium | Fix reported | |
| ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle | ha-mcp | PyPI | Medium | Fix reported | |
| ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path | ha-mcp | PyPI | Medium | Fix reported | |
| Home Assistant MCP Server: YAML config backups written under www/ are served unauthenticated at /local/ | ha-mcp | PyPI | Medium | Fix reported |