PyPI/ha-mcp: medium 6.5
ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
Action: Upgrade ha-mcp to 7.10.0 or later.
pip install ha-mcp==7.10.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.10.0 | - |
Fixed versions
| 7.10.0 |
Sources
- osv: GHSA-q855-8rh5-jfgq
- https://github.com/homeassistant-ai/ha-mcp/security/advisories/GHSA-q855-8rh5-jfgq
- https://github.com/homeassistant-ai/ha-mcp/pull/1508
- https://github.com/homeassistant-ai/ha-mcp/commit/9f5b085ad4a7b38b067c9da0dc5b45462c4d796e
- https://github.com/homeassistant-ai/ha-mcp
published · modified · JSON