CVE-2026-23833
2 advisories.
PyPI/esphome CVE-2026-23833: medium
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
Action: Upgrade esphome to 2025.12.7 or later.
pip install esphome==2025.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2025.9.0 | 2025.12.7 | - |
Fixed versions
| 2025.12.7 |
Sources
- osv: GHSA-4h3h-63v6-88qx
- https://github.com/esphome/esphome/security/advisories/GHSA-4h3h-63v6-88qx
- https://nvd.nist.gov/vuln/detail/CVE-2026-23833
- https://github.com/esphome/esphome/pull/13306
- https://github.com/esphome/esphome/commit/69d7b6e9210390051318bd8e6410727689de08d6
- https://esphome.io/guides/security_best_practices
- https://github.com/esphome/esphome
CVE-2026-23833 · published · modified · JSON
PyPI/esphome CVE-2026-23833: unknown
ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component
Action: Upgrade esphome to 2025.12.7 or later.
pip install esphome==2025.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2025.9.0 | 2025.12.7 | - |
Fixed versions
| 2025.12.7 |
Sources
- osv: PYSEC-2026-1326
- https://github.com/esphome/esphome/security/advisories/GHSA-4h3h-63v6-88qx
- https://nvd.nist.gov/vuln/detail/CVE-2026-23833
- https://github.com/esphome/esphome/pull/13306
- https://github.com/esphome/esphome/commit/69d7b6e9210390051318bd8e6410727689de08d6
- https://esphome.io/guides/security_best_practices
- https://github.com/esphome/esphome
- https://pypi.org/project/esphome
- https://github.com/advisories/GHSA-4h3h-63v6-88qx
CVE-2026-23833 · published · modified · JSON