PYSEC-2019-221

2019-09-2316:15:00

Google

osv.dev

0.002 Low

EPSS

Percentile

51.3%

JSON

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application’s error log via components/api.py.

CPENameOperatorVersion
homeassistanteq0.56.1
homeassistanteq0.29.3
homeassistanteq0.46.1
homeassistanteq0.65.2
homeassistanteq0.13.0
homeassistanteq0.7.0rc1
homeassistanteq0.20.3
homeassistanteq0.12.0
homeassistanteq0.7.3
homeassistanteq0.39.2

Name	Operator	Version
homeassistant	eq	0.56.1
homeassistant	eq	0.29.3
homeassistant	eq	0.46.1
homeassistant	eq	0.65.2
homeassistant	eq	0.13.0
homeassistant	eq	0.7.0rc1
homeassistant	eq	0.20.3
homeassistant	eq	0.12.0
homeassistant	eq	0.7.3
homeassistant	eq	0.39.2