CVE-2018-21019

Home Assistant pre-0.67.0 contains an information-disclosure vulnerability: an unauthenticated attacker can read the application’s error log via components/api.py. A fix is available in the 0.67.0 release and newer (per release and advisories). No exploitation details are provided beyond this in ...