Disclosure: security vulnerabilities in custom integrations HACS, Dwains Dashboard, Font Awesome and others

[alimazin]

Does this recent security update solve the security concern presented in this discussion

Home Assistant security concern

Today, I tried to turn light of Gateway Xiaomi on by HA, but it didn’t work. When I opened Mihome app to try to turn on the light, It can turn on and HA also got the status of Gateway light was on, but HA cannot controlled it. I tried to play around to understand why HA cannot to turn the light on but it can get the status (include Door, light sensor status). When I tried to rename Gateway on HA the same as Mihome app, I found a sentence “Homeassistant security is crap. Stop using it” in name …

Any idea?