PyPI/homeassistant CVE-2026-33045: medium 5.4, EPSS 0.21%

Home Assistant has stored XSS in history-graphs

Action: Upgrade homeassistant to 2026.01 or later.

pip install homeassistant==2026.01

Affected

Fixed versions

Sources

• osv: PYSEC-2026-2516
• nvd: CVE-2026-33045
• https://github.com/home-assistant/core/security/advisories/GHSA-46j8-vpx8-6p72
• https://github.com/home-assistant/core/security/advisories/GHSA-mq77-rv97-285m
• https://github.com/home-assistant/core
• https://pypi.org/project/homeassistant
• https://github.com/advisories/GHSA-46j8-vpx8-6p72

CVE-2026-33045 · published 2026-07-13T14:36:45.800137Z · modified 2026-07-13T16:31:57.327342954Z · JSON