Executive brief
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Affected products
- PyPI homeassistant
Junglewise Threat Intelligence
CVE-2018-21019: PYSEC-2019-221 - Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's
CVE-2018-21019 · Severity: low · CVSS 3.1 · Published 2019-09-23
Technologies: homeassistant (PyPI). Vendors: PyPI.
Related threats
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automati
- Home Assistant Core path traversal in backup upload
- PYSEC-2026-2516 - Home Assistant has stored XSS in history-graphs
- PYSEC-2026-2517 - Home Assistant has stored XSS in Map-card through malicious device name