Executive brief
Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
Affected products
- PyPI homeassistant
Junglewise Threat Intelligence
CVE-2025-25305: PYSEC-2026-1452 - Home Assistant does not correctly validate SSL for outgoing requests in core and used libs
CVE-2025-25305 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: homeassistant (PyPI). Vendors: PyPI.
Related threats
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automati
- Home Assistant Core path traversal in backup upload
- PYSEC-2026-2516 - Home Assistant has stored XSS in history-graphs
- PYSEC-2026-2517 - Home Assistant has stored XSS in Map-card through malicious device name