Skip to content
OpenAdvisories

Package · PyPI

esphome-device-builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2026-59177 Scanner template

    ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces

    ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to 1.0.10, the `Home Assistant` add-on's trusted `ingress` site binds to `0.0.0.0` while intentionally skipping dashboard authentication because the supervisor is …

    esphome device-builder esphome-device-builder PyPI
  • Critical 9.8
    CVE-2026-59178

    ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

    ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from `$ESPHOME_USERNAME` and `$ESPHOME_PASSWORD`. Earlier versions, and the legacy `esphome` …

    esphome device-builder esphome-device-builder PyPI