homeassistant

12987 readers

3 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 2 years ago

MODERATORS

[email protected]

117

Security audits of Home Assistant (www.home-assistant.io)

submitted 1 year ago by Undearius to c/[email protected]

8 comments fedilink hide all child comments

All reported issues have been addressed as part of Home Assistant 2023.9, released on September 6, 2023

Cure53 found issues in Home Assistant, 3 of which were marked as “critical” severity
The GitHub Security Lab also audited Home Assistant and found six non-critical issues. Two of the issues overlapped with Cure53.
No authentication bypasses have been found

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 1 points 1 year ago

It's easier to find something like XSS or auth bypass when you can read the code