https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 00:41:44 +0000 https://cve.radiocsirt.org/vuln/cve-2026-40602 <p><strong>Affected:</strong> home-assistant-ecosystem home-assistant-cli</p> <p>The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no restrictions. This gave users access to Python&#39;s internals and extended the scope of templating beyond the intended usage. This vulnerability is fixed in 1.0.0.</p> <p><strong>Affected:</strong> home-assistant-ecosystem home-assistant-cli</p> <p>The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no restrictions. This gave users access to Python&#39;s internals and extended the scope of templating beyond the intended usage. This vulnerability is fixed in 1.0.0.</p> https://cve.radiocsirt.org/vuln/cve-2026-40602