Skip to content
OpenAdvisories

Product · home-assistant

core

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2023-41898 Public exploit

    Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android

    Home assistant is an open source home automation. The Home Assistant Companion for Android app up to version 2023.8.2 is vulnerable to arbitrary URL loading in a WebView. This enables all sorts of attacks, including arbitrary JavaScript execution, limited nat…

    home-assistant core