PyPI/homeassistant CVE-2026-33045: low, EPSS 0.25%

Home Assistant has stored XSS in history-graphs

Action: Upgrade homeassistant to 2026.01 or later.

pip install homeassistant==2026.01

Affected

Fixed versions

Sources

• osv: GHSA-46j8-vpx8-6p72
• https://github.com/home-assistant/core/security/advisories/GHSA-46j8-vpx8-6p72
• https://github.com/home-assistant/core/security/advisories/GHSA-mq77-rv97-285m
• https://nvd.nist.gov/vuln/detail/CVE-2026-33045
• https://github.com/home-assistant/core

CVE-2026-33045 · published 2026-03-27T20:35:01Z · modified 2026-07-13T16:42:56.305733260Z · JSON