homeassistant-ai/ha-mcp
master@ 9f332fd
Fixes6
CVEs0
Peak severityHigh
Commits2,473
Regression coverage16.7%
Highlights
Authentication Bypass: 1 prior fix. Scrutinize any change in this area.
.github/workflows/hotfix-release.yml: most-fixed (1 issue). Treat as high-risk during review.
5 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Authentication Bypass: 1 historical fix(es) link src/ha_mcp/settings_ui.py to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link src/ha_mcp/policy/evaluator.py, middleware.py, bulk_selector.py to Authorization Bypass.
Cross-Site Scripting: 1 historical fix(es) link src/ha_mcp/settings_ui/settings.js to Cross-Site Scripting.
Last analyzed 30 Sep 2026, 02:52 UTC