{"action":"Upgrade homeassistant to 2026.01 or later.","affected":[{"fixed":"2026.01","introduced":"2020.02"}],"component":"homeassistant","cve_ids":["CVE-2026-33044"],"ecosystem":"PyPI","epss":0.00231,"exploited":false,"fixed_versions":["2026.01"],"ghsa_id":"GHSA-r584-6283-p7xc","id":"tcs_01M5KFX8A7FCYZDQ9TR7MT4PZX","modified_at":"2026-07-13T16:42:58.745916720Z","published_at":"2026-03-27T20:33:22Z","references":["https://osv.dev/vulnerability/GHSA-r584-6283-p7xc","https://github.com/home-assistant/core/security/advisories/GHSA-r584-6283-p7xc","https://nvd.nist.gov/vuln/detail/CVE-2026-33044","https://github.com/home-assistant/core"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-r584-6283-p7xc","url":"https://osv.dev/vulnerability/GHSA-r584-6283-p7xc"},{"source":"nvd","source_id":"CVE-2026-33044","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33044"}],"summary":"Home Assistant has stored XSS in Map-card through malicious device name"}