CVE-2025-57808
2 advisories.
PyPI/esphome CVE-2025-57808: high 8.1, EPSS 1.63%
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Action: Upgrade esphome to 2025.8.1 or later.
pip install esphome==2025.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.8.1 | - |
Fixed versions
| 2025.8.1 |
Sources
- osv: GHSA-mxh2-ccgj-8635
- https://github.com/esphome/esphome/security/advisories/GHSA-mxh2-ccgj-8635
- https://nvd.nist.gov/vuln/detail/CVE-2025-57808
- https://github.com/esphome/esphome/commit/2aceb56606ec8afec5f49c92e140c8050a6ccbe5
- https://github.com/esphome/esphome
CVE-2025-57808 · published · modified · JSON
PyPI/esphome CVE-2025-57808: high 8.1, EPSS 1.63%
ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header
Action: Upgrade esphome to 2025.8.1 or later.
pip install esphome==2025.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2025.8.1 | - |
Fixed versions
| 2025.8.1 |
Sources
- osv: PYSEC-2026-1330
- https://github.com/esphome/esphome/security/advisories/GHSA-mxh2-ccgj-8635
- https://nvd.nist.gov/vuln/detail/CVE-2025-57808
- https://github.com/esphome/esphome/commit/2aceb56606ec8afec5f49c92e140c8050a6ccbe5
- https://github.com/esphome/esphome
- https://pypi.org/project/esphome
- https://github.com/advisories/GHSA-mxh2-ccgj-8635
CVE-2025-57808 · published · modified · JSON