Skip to content
OpenAdvisories

Vendor

ha-china

6 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.6

    Blueprint Studio Git credential helper command injection

    Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_components/blueprint_studio/backend/git_manager.py by interpolating the configured …

  • High 8.7

    Blueprint Studio API authorization bypass for non-admin Home Assistant users

    Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforc…