Home Assistant had two #security audits done, and no authentication bypasses were found. 🎉 #Cure53 found three critical issues that could allow attackers to trick users and steal login credentials. 🪪 The issues have been fixed in Home Assistant 2023.9 and the latest #HomeAssistant apps for #iOS and #Android. 🤖 The #GitHub Security Lab also found six non-critical issues, two of which overlapped with Cure53's findings. All reported issues have been fixed. 🤙🏻

https://www.home-assistant.io/blog/2023/10/19/security-audits-of-home-assistant/