Repository navigation
Security: kaboomAE/dartec-ha-manager
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Cloud-controlled Link setup accepts arbitrary Headscale login serversGHSA-hrm5-cvxj-cc7w published
Sep 28, 2026 by kaboomAEModerate -
Regular Home Assistant users can grant Dartec maintenance consentGHSA-qx58-m2pf-8388 published
Sep 28, 2026 by kaboomAEModerate -
Concurrent household admin changes can remove the last active administratorGHSA-cvj4-75mr-7858 published
Sep 28, 2026 by kaboomAEModerate -
Manager-controlled media size allows Home Assistant memory exhaustionGHSA-88r5-5vxg-53px published
Sep 28, 2026 by kaboomAEModerate -
Cloud-controlled media download URL enables SSRFGHSA-mqpf-x42g-g28w published
Sep 28, 2026 by kaboomAEModerate -
Automation creation ID permits REST path traversal to privileged Home Assistant servicesGHSA-qj62-wg85-79cv published
Sep 28, 2026 by kaboomAEHigh -
Cloud-controlled backup upload URL enables backup exfiltration and SSRFGHSA-v9pc-vw88-p798 published
Sep 28, 2026 by kaboomAEHigh -
Cloud service commands can activate automations without homeowner consentGHSA-rwhg-fxhq-m6pg published
Sep 28, 2026 by kaboomAEHigh -
Cloud can activate sensitive Home Assistant scenes without maintenance consentGHSA-4m4w-x5r5-hmvh published
Sep 28, 2026 by kaboomAEHigh -
Comma-delimited entity targets bypass own-control authorizationGHSA-vj2g-mxcr-wx5r published
Sep 28, 2026 by kaboomAEHigh
Learn more about advisories related to kaboomAE/dartec-ha-manager in the GitHub Advisory Database