Skip to content

Add ESPHome advisory references#8606

Draft
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8606from
cookesan:esphome-27287-fixed-references
Draft

Add ESPHome advisory references#8606
cookesan wants to merge 2 commits into
github:cookesan/advisory-improvement-8606from
cookesan:esphome-27287-fixed-references

Conversation

@cookesan

@cookesan cookesan commented Jul 7, 2026

Copy link
Copy Markdown

Summary

  • Add the ESPHome 2024.2.2 GitHub release reference.
  • Add the PyPI fixed-version reference for esphome 2024.2.2.
  • Add the NVD advisory reference for CVE-2024-27287.
  • Leave affected range, severity, summary, and review metadata unchanged.

Validation

  • Verified the advisory aliases CVE-2024-27287.
  • Verified NVD returns a matching CVE-2024-27287 record describing the ESPHome dashboard XSS fixed in 2024.2.2.
  • Confirmed GitHub release 2024.2.2 exists and contains the existing fix commit.
  • Confirmed PyPI publishes esphome 2024.2.2 and it is not yanked.
  • Ran jq empty on the advisory JSON.
  • Ran git diff --check.
  • Checked for duplicate advisory reference URLs.

@github-actions github-actions Bot changed the base branch from main to cookesan/advisory-improvement-8606 July 7, 2026 13:57
@cookesan cookesan changed the title Add ESPHome fixed release references Add ESPHome advisory references Jul 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant