PyPI/homeassistant CVE-2026-91129: medium 5.4, EPSS 0.20%

Home Assistant: mDNS Server-Side Request Forgery

Action: Upgrade homeassistant to 2026.2.3 or later.

pip install homeassistant==2026.2.3

Affected

Fixed versions

Sources

• osv: GHSA-4ghv-53cq-7wp3
• https://github.com/home-assistant/core/security/advisories/GHSA-4ghv-53cq-7wp3
• https://github.com/home-assistant/core/pull/162941
• https://github.com/home-assistant/core/commit/0f3c7ca2772b605c0f3c09c88f35e527ea6ea560
• https://github.com/home-assistant/core/commit/815c708d19aa0c7f59f9ee318b613a5e481a42b3
• https://github.com/home-assistant/core
• https://github.com/home-assistant/core/releases/tag/2026.2.3

CVE-2026-91129 · published 2026-09-22T20:40:51Z · modified 2026-10-01T17:56:22.468929375Z · JSON