CVE

2024

• Mar 20
  CVE-2024-29019: Authentication bypass via Cross site request forgery in ESPhome
• Mar 5
  CVE-2024-27287: Cross-site scripting (stored) in ESPHome
• Feb 25
  CVE-2024-27081: Remote code execution via arbitrary file write in ESPHome

2023

• Apr 11
  CVE-2023-27216: OS command injection vulnerability in D-Link DSL-3782

2022

• Dec 6
  CVE-2022-44900: path traversal vulnerability in py7zr