PyPI/homeassistant-cli CVE-2026-40602: medium 5.6, EPSS 0.10%
Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates
Action: Upgrade homeassistant-cli to 1.0.0 or later.
pip install homeassistant-cli==1.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0 | - |
Fixed versions
| 1.0.0 |
Sources
- osv: GHSA-33qf-q99x-wpm8
- https://github.com/home-assistant-ecosystem/home-assistant-cli/security/advisories/GHSA-33qf-q99x-wpm8
- https://nvd.nist.gov/vuln/detail/CVE-2026-40602
- https://github.com/home-assistant-ecosystem/home-assistant-cli/pull/453
- https://github.com/home-assistant-ecosystem/home-assistant-cli
CVE-2026-40602 · published · modified · JSON