Executive brief
Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
Affected products
- PyPI homeassistant
Junglewise Threat Intelligence
CVE-2025-62172: PYSEC-2026-1453 - Home Assistant has Stored XSS vulnerability in Energy dashboard from Energy Entity Name
CVE-2025-62172 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: homeassistant (PyPI). Vendors: PyPI.
Related threats
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0, the Statistics Graph card in
- Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automati
- Home Assistant Core path traversal in backup upload
- PYSEC-2026-2516 - Home Assistant has stored XSS in history-graphs
- PYSEC-2026-2517 - Home Assistant has stored XSS in Map-card through malicious device name