homeassistant-stubs (2022.12.0b2), pytest-homeassistant-custom-component (0.12.24) potentially affected by CVE-2026-91129 via homeassistant (2022.12.0b2)

homeassistant PYPI version 2022.12.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.12.0b2 - pytest-homeassistant-custom-component 0.12.24 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.11.0b6), pytest-homeassistant-custom-component (0.12.16) potentially affected by CVE-2026-91129 via homeassistant (2022.11.0b6)

homeassistant PYPI version 2022.11.0b6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.11.0b6 - pytest-homeassistant-custom-component 0.12.16 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.6.5), pytest-homeassistant-custom-component (0.9.15) potentially affected by CVE-2026-91129 via homeassistant (2022.6.5)

homeassistant PYPI version 2022.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.5 - pytest-homeassistant-custom-component 0.9.15 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.7.3), pytest-homeassistant-custom-component (0.10.4) potentially affected by CVE-2026-91129 via homeassistant (2022.7.3)

homeassistant PYPI version 2022.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.7.3 - pytest-homeassistant-custom-component 0.10.4 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.8.0b0), pytest-homeassistant-custom-component (0.11.0) potentially affected by CVE-2026-91129 via homeassistant (2022.8.0b0)

homeassistant PYPI version 2022.8.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.0b0 - pytest-homeassistant-custom-component 0.11.0 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.2.0b2), pytest-homeassistant-custom-component (0.6.1) potentially affected by CVE-2026-91129 via homeassistant (2022.2.0b2)

homeassistant PYPI version 2022.2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.2.0b2 - pytest-homeassistant-custom-component 0.6.1 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.3), pytest-homeassistant-custom-component (0.13.52) potentially affected by CVE-2026-91129 via homeassistant (2023.8.3)

homeassistant PYPI version 2023.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.3 - pytest-homeassistant-custom-component 0.13.52 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.8.0b4), pytest-homeassistant-custom-component (0.13.48) potentially affected by CVE-2026-91129 via homeassistant (2023.8.0b4)

homeassistant PYPI version 2023.8.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.8.0b4 - pytest-homeassistant-custom-component 0.13.48 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2021.12.0), pytest-homeassistant-custom-component (0.5.4) potentially affected by CVE-2026-91129 via homeassistant (2021.12.0)

homeassistant PYPI version 2021.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.0 - pytest-homeassistant-custom-component 0.5.4 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.8.4), pytest-homeassistant-custom-component (0.11.9) potentially affected by CVE-2026-91129 via homeassistant (2022.8.4)

homeassistant PYPI version 2022.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.8.4 - pytest-homeassistant-custom-component 0.11.9 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.4.0b7), pytest-homeassistant-custom-component (0.13.16) potentially affected by CVE-2026-91129 via homeassistant (2023.4.0b7)

homeassistant PYPI version 2023.4.0b7 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.4.0b7 - pytest-homeassistant-custom-component 0.13.16 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2021.12.6), pytest-homeassistant-custom-component (0.5.10) potentially affected by CVE-2026-91129 via homeassistant (2021.12.6)

homeassistant PYPI version 2021.12.6 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.12.6 - pytest-homeassistant-custom-component 0.5.10 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2023.3.0b4), pytest-homeassistant-custom-component (0.13.1) potentially affected by CVE-2026-91129 via homeassistant (2023.3.0b4)

homeassistant PYPI version 2023.3.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2023.3.0b4 - pytest-homeassistant-custom-component 0.13.1 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.4.0b1), pytest-homeassistant-custom-component (0.8.1) potentially affected by CVE-2026-91129 via homeassistant (2022.4.0b1)

homeassistant PYPI version 2022.4.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.4.0b1 - pytest-homeassistant-custom-component 0.8.1 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.5.3), pytest-homeassistant-custom-component (0.9.1) potentially affected by CVE-2026-91129 via homeassistant (2022.5.3)

homeassistant PYPI version 2022.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.5.3 - pytest-homeassistant-custom-component 0.9.1 Source cves: CVE-2026-91129 Source advisory:...

homeassistant-stubs (2022.6.0b4), pytest-homeassistant-custom-component (0.9.8) potentially affected by CVE-2026-91129 via homeassistant (2022.6.0b4)

homeassistant PYPI version 2022.6.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2022.6.0b4 - pytest-homeassistant-custom-component 0.9.8 Source cves: CVE-2026-91129 Source advisory:...

djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

ImpactMany djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

PYSEC-2026-4037 djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags

Impact Many djust built-in component template tags djust.components.templatetags. render a developer/user-supplied URL into an href / action attribute, HTML-escaping it with conditionalescape but never validating the URL scheme. HTML escaping prevents attribute breakout but does not neutralize a...

CVE-2026-102305

An ui misrepresentation flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=533021953 https://code.google.com/p/chromium/issues/detail?id=102305...

CVE-2026-102303

An uninitialized resource flaw was found in the GPU component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=559727039 https://code.google.com/p/chromium/issues/detail?id=102303...