Skip to content

ha-mcp has XSS via Unescaped HTML in OAuth Consent Form

Moderate severity GitHub Reviewed Published Mar 11, 2026 in homeassistant-ai/ha-mcp • Updated Mar 12, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts