blueprint-studio vulnerabilities

2 known vulnerabilities in blueprint-studio from Ha-china. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  blueprint-studio: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-53455Aug 18, 2026Ha-china

  Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio generated a shell-based Git credential helper in custom_components/blueprint_studio/backend/git_manager.py by interpolating the configured G

• 8.7 High severity

  blueprint-studio: Missing Authorization

  CVE-2026-53453Aug 18, 2026Ha-china

  Blueprint Studio is a VS Code-like file editor for Home Assistant configuration files. Prior to 2.5.2, Blueprint Studio exposed administrator-intended backend API actions to any authenticated Home Assistant user because the backend did not consistently enforce