PT-2026-77318

Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio backend API handlers in custom components/blueprint studio/backend/api.py returned raw exception strings to authenticated Home Assistant users. Some exception messages could...

CVE-2026-28675: Exposure of Sensitive Information to an Unauthorized Actor

OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI. Prior to version 1.6.3-alpha, some endpoints returned raw exception strings to clients. Additionally, login token material was exposed in UI/rendered responses and token rotation output. This...