Read the docs

Hacs

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Hacs records in CISA KEV

No Hacs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Home Assistant Community Store 1 record HIGH

Records

1 record

TI-2021-22555 CVE-2021-47942 · GHSA-cqg8-v99m-gv9m

Home Assistant Community Store 1.10.0 Path Traversal Account Takeover

Priority HIGH 77

Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversing directories via the /hacsfiles/ endpoint.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00498 Published 2026-05-16 Fixed in 1.10.0 CWE-22
Open these records in search →