Vulnerabilities in homeassistant-ai

2 results

CVE-2026-32111MEDIUMha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracleEPSS 0.3%CVE-2026-32112MEDIUMha-mcp has XSS via Unescaped HTML in OAuth Consent FormEPSS 0.2%