{"action":"Upgrade homeassistant to 2026.01 or later.","affected":[{"fixed":"2026.01","introduced":"2025.02"}],"component":"homeassistant","cve_ids":["CVE-2026-33045"],"ecosystem":"PyPI","epss":0.00209,"exploited":false,"fixed_versions":["2026.01"],"ghsa_id":"GHSA-46j8-vpx8-6p72","id":"tcs_01M5KGZYG8GHGWBV8SQ6ED64BV","modified_at":"2026-07-13T16:31:57.327342954Z","published_at":"2026-07-13T14:36:45.800137Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2516","https://github.com/home-assistant/core/security/advisories/GHSA-46j8-vpx8-6p72","https://github.com/home-assistant/core/security/advisories/GHSA-mq77-rv97-285m","https://nvd.nist.gov/vuln/detail/CVE-2026-33045","https://github.com/home-assistant/core","https://pypi.org/project/homeassistant","https://github.com/advisories/GHSA-46j8-vpx8-6p72"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-2516","url":"https://osv.dev/vulnerability/PYSEC-2026-2516"},{"source":"nvd","source_id":"CVE-2026-33045","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33045"}],"summary":"Home Assistant has stored XSS in history-graphs"}