CVE-2025-25305
2 advisories.
PyPI/homeassistant CVE-2025-25305: high 7, EPSS 0.25%
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
Action: Upgrade homeassistant to 2024.1.6 or later.
pip install homeassistant==2024.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2024.1.6 | - |
Fixed versions
| 2024.1.6 |
Sources
- osv: GHSA-m3pm-rpgg-5wj6
- https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6
- https://nvd.nist.gov/vuln/detail/CVE-2025-25305
- https://github.com/home-assistant/core/commit/8c6547f1b64f4a3d9f10090b97383353c9367892
- https://github.com/home-assistant/core
CVE-2025-25305 · published · modified · JSON
PyPI/homeassistant CVE-2025-25305: high 7, EPSS 0.25%
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
Action: Upgrade homeassistant to 2024.1.6 or later.
pip install homeassistant==2024.1.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2024.1.6 | - |
Fixed versions
| 2024.1.6 |
Sources
- osv: PYSEC-2026-1452
- https://github.com/home-assistant/core/security/advisories/GHSA-m3pm-rpgg-5wj6
- https://nvd.nist.gov/vuln/detail/CVE-2025-25305
- https://github.com/home-assistant/core/commit/8c6547f1b64f4a3d9f10090b97383353c9367892
- https://github.com/home-assistant/core
- https://pypi.org/project/homeassistant
- https://github.com/advisories/GHSA-m3pm-rpgg-5wj6
CVE-2025-25305 · published · modified · JSON