CVE-2018-21019

Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application’s error log via components/api.py.

Date published : 2019-09-23

https://github.com/home-assistant/home-assistant/pull/13836

https://github.com/home-assistant/home-assistant/releases/tag/0.67.0