ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path
Moderate severity
GitHub Reviewed
Published
May 31, 2026
in
homeassistant-ai/ha-mcp
•
Updated Jul 7, 2026
Give feedback on Dependabot alerts