104
Security audits of Home Assistant (www.home-assistant.io)
submitted 1 year ago by Undearius@lemmy.ca to c/homeassistant@lemmy.world
8 comments fedilink hide all child comments

All reported issues have been addressed as part of Home Assistant 2023.9, released on September 6, 2023

  • Cure53 found issues in Home Assistant, 3 of which were marked as “critical” severity
  • The GitHub Security Lab also audited Home Assistant and found six non-critical issues. Two of the issues overlapped with Cure53.
  • No authentication bypasses have been found
you are viewing a single comment's thread
view the rest of the comments
[-] AliasAKA@lemmy.world 27 points 1 year ago* (last edited 1 year ago)

This is really awesome — open source allows for auditing. Not great that there are vulnerabilities, but these vulnerabilities also exist (and possibly more) in closed source software that doesn’t get audited to be fixed, just exploited. Hopefully these get patched soon!

[-] monty33@lemmy.ml 13 points 1 year ago

Article says all were patched in 2023-09 release!

[-] AliasAKA@lemmy.world 3 points 1 year ago* (last edited 1 year ago)

Ah thank you, I should’ve read more closely :)

load more comments (4 replies)
this post was submitted on 23 Oct 2023
104 points (100.0% liked)

homeassistant

11921 readers
31 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 1 year ago
MODERATORS
GreatAlbatross@feddit.uk