CVE-2024-29019
2 advisories.
PyPI/esphome CVE-2024-29019: high 8.1
ESPHome vulnerable to Authentication bypass via Cross site request forgery
Action: Upgrade esphome to 2024.3.0 or later.
pip install esphome==2024.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2023.12.9 | 2024.3.0 | - |
Fixed versions
| 2024.3.0 |
Sources
- osv: GHSA-5925-88xh-6h99
- https://github.com/esphome/esphome/security/advisories/GHSA-5925-88xh-6h99
- https://nvd.nist.gov/vuln/detail/CVE-2024-29019
- https://github.com/esphome/esphome/pull/6396
- https://github.com/esphome/esphome/pull/6397
- https://github.com/esphome/esphome/commit/c56c40cb824e34ed2b89ba1cb8a3a5eb31459c74
- https://github.com/advisories/GHSA-9p43-hj5j-96h5
- https://github.com/esphome/esphome
- https://github.com/esphome/esphome/releases/tag/2024.3.0
CVE-2024-29019 · published · modified · JSON
PyPI/esphome CVE-2024-29019: high 8.1
ESPHome vulnerable to Authentication bypass via Cross site request forgery
Action: Upgrade esphome to 2024.3.0 or later.
pip install esphome==2024.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2023.12.9 | 2024.3.0 | - |
Fixed versions
| 2024.3.0 |
Sources
- osv: PYSEC-2026-1327
- https://github.com/esphome/esphome/security/advisories/GHSA-5925-88xh-6h99
- https://nvd.nist.gov/vuln/detail/CVE-2024-29019
- https://github.com/esphome/esphome/pull/6396
- https://github.com/esphome/esphome/pull/6397
- https://github.com/esphome/esphome/commit/c56c40cb824e34ed2b89ba1cb8a3a5eb31459c74
- https://github.com/advisories/GHSA-9p43-hj5j-96h5
- https://github.com/esphome/esphome
- https://github.com/esphome/esphome/releases/tag/2024.3.0
- https://pypi.org/project/esphome
- https://github.com/advisories/GHSA-5925-88xh-6h99
CVE-2024-29019 · published · modified · JSON