Home Assistant Cli
Approved changes feed: RSS · Atom
cpe:2.3:a:home-assistant-ecosystem:home-assistant-cli:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Home Assistant Ecosystem (56dd9299-61d0-530c-a02a-0bfaec6ee47e) |
|---|---|
| Product | Home Assistant Cli (eb11ee9e-95ca-52c9-9872-5ffd55ab42ab) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-40602 |
vulnerable | 2026-06-08 08:01:20.866852 |
hass-cli: Handling of user-supplied Jinja2 templates
MEDIUM (5.6)
The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no restrictions. This gave users access to Python's internals and extended the scope of templating beyond the intended usage. This vulnerability is fixed in 1.0.0.
Published: 2026-04-21T17:40:10.251Z
Updated: 2026-04-21T19:02:03.968Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.