homeassistant-stubs (2022.3.0), pytest-homeassistant-custom-component (0.6.22) potentially affected by CVE-2025-65713 via homeassistant (2022.3.0)

homeassistant PYPI version 2022.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0 - pytest-homeassistant-custom-component 0.6.22 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2023.4.0b7), pytest-homeassistant-custom-component (0.13.16) potentially affected by CVE-2025-65713 via homeassistant (2023.4.0b7)

homeassistant PYPI version 2023.4.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.4.0b7 - pytest-homeassistant-custom-component 0.13.16 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.3.1), pytest-homeassistant-custom-component (0.7.0) potentially affected by CVE-2025-65713 via homeassistant (2022.3.1)

homeassistant PYPI version 2022.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.1 - pytest-homeassistant-custom-component 0.7.0 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.3.7), pytest-homeassistant-custom-component (0.7.6) potentially affected by CVE-2025-65713 via homeassistant (2022.3.7)

homeassistant PYPI version 2022.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.7 - pytest-homeassistant-custom-component 0.7.6 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2022.10.4), pytest-homeassistant-custom-component (0.12.9) potentially affected by CVE-2025-65713 via homeassistant (2022.10.4)

homeassistant PYPI version 2022.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.4 - pytest-homeassistant-custom-component 0.12.9 Source cves: CVE-2025-65713 Source advisory:...

homeassistant-stubs (2023.1.0b2), pytest-homeassistant-custom-component (0.12.38) potentially affected by CVE-2025-65713 via homeassistant (2023.1.0b2)

homeassistant PYPI version 2023.1.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.1.0b2 - pytest-homeassistant-custom-component 0.12.38 Source cves: CVE-2025-65713 Source advisory:...

Security Bulletin: Code Injection via Custom Component Endpoint with Authentication Bypass

Summary A code injection vulnerability was identified in the custom component endpoint that allowed execution of arbitrary Python code through the component creation process. The vulnerability was compounded by an authentication bypass feature where AUTOLOGIN was enabled by default, allowing...

homeassistant-stubs (2022.3.0b2), pytest-homeassistant-custom-component (0.6.17) potentially affected by CVE-2026-54317 via homeassistant (2022.3.0b2)

homeassistant PYPI version 2022.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b2 - pytest-homeassistant-custom-component 0.6.17 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.7.7), pytest-homeassistant-custom-component (0.10.8) potentially affected by CVE-2026-54317 via homeassistant (2022.7.7)

homeassistant PYPI version 2022.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.7 - pytest-homeassistant-custom-component 0.10.8 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.10.2), pytest-homeassistant-custom-component (0.13.65) potentially affected by CVE-2026-54317 via homeassistant (2023.10.2)

homeassistant PYPI version 2023.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.10.2 - pytest-homeassistant-custom-component 0.13.65 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.9.0b6), pytest-homeassistant-custom-component (0.11.18) potentially affected by CVE-2026-54317 via homeassistant (2022.9.0b6)

homeassistant PYPI version 2022.9.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.9.0b6 - pytest-homeassistant-custom-component 0.11.18 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2021.4.0b4), pytest-homeassistant-custom-component (0.3.0) potentially affected by CVE-2026-54317 via homeassistant (2021.4.0b4)

homeassistant PYPI version 2021.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b4 - pytest-homeassistant-custom-component 0.3.0 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.6.3), pytest-homeassistant-custom-component (0.9.13) potentially affected by CVE-2026-54317 via homeassistant (2022.6.3)

homeassistant PYPI version 2022.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.3 - pytest-homeassistant-custom-component 0.9.13 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.12.0), pytest-homeassistant-custom-component (0.13.82) potentially affected by CVE-2026-54317 via homeassistant (2023.12.0)

homeassistant PYPI version 2023.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.12.0 - pytest-homeassistant-custom-component 0.13.82 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.4.0b5), pytest-homeassistant-custom-component (0.13.14) potentially affected by CVE-2026-54317 via homeassistant (2023.4.0b5)

homeassistant PYPI version 2023.4.0b5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.4.0b5 - pytest-homeassistant-custom-component 0.13.14 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.10.0), pytest-homeassistant-custom-component (0.12.5) potentially affected by CVE-2026-54317 via homeassistant (2022.10.0)

homeassistant PYPI version 2022.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.10.0 - pytest-homeassistant-custom-component 0.12.5 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2022.3.0b6), pytest-homeassistant-custom-component (0.6.21) potentially affected by CVE-2026-54317 via homeassistant (2022.3.0b6)

homeassistant PYPI version 2022.3.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.3.0b6 - pytest-homeassistant-custom-component 0.6.21 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2023.3.6), hydroqc2mqtt (>=0.12.0, <=0.12.2) +2 more potentially affected by CVE-2026-54317 via homeassistant (2023.3.6)

homeassistant PYPI version 2023.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.6 - hydroqc2mqtt =0.12.0, =0.12.2 - mqtt-hass-base 4.2.1 - pytest-homeassistant-custom-component 0.13.10...

homeassistant-stubs (2022.4.0b0), pytest-homeassistant-custom-component (0.8.0) potentially affected by CVE-2026-54317 via homeassistant (2022.4.0b0)

homeassistant PYPI version 2022.4.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b0 - pytest-homeassistant-custom-component 0.8.0 Source cves: CVE-2026-54317 Source advisory:...

homeassistant-stubs (2021.12.7), pytest-homeassistant-custom-component (0.5.11) potentially affected by CVE-2026-54317 via homeassistant (2021.12.7)

homeassistant PYPI version 2021.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.7 - pytest-homeassistant-custom-component 0.5.11 Source cves: CVE-2026-54317 Source advisory:...