Looking for "Before you expose your HA to the Internet Do This" document

[123 (Taras)]

Security audits of Home Assistant

Summary: Home Assistant had two security audits done as part of our regular security assessments. You are safe. No authentication bypasses have been found. We did fix issues related to attackers potentially tricking users to take over their instance. All fixes are included in Home Assistant 2023.9 and the latest Home Assistant apps for iOS and Android. Please make sure you’re up-to-date. Security is very important to us at Home Assistant and Nabu Casa. Being open source makes it easy to let an…

---

Security Disclosures

2021-01-22

Disclosure: security vulnerabilities in custom integrations HACS, Dwains...

2021-01-23

Security Disclosure 2: vulnerabilities in custom integrations HACS, Font...

2023-03-08

Disclosure: Supervisor security vulnerability