ESPHome remote code execution via arbitrary file write

ESPHome vulnerable to stored Cross-site Scripting in edit configuration file API

ESPHome external_components file:// Scheme Validation Bypass Leading to Remote Code Execution

ESP-IDF web_server basic auth bypass using empty or incomplete Authorization header

ESPHome vulnerable to Authentication bypass via Cross site request forgery

ESPHome vulnerable to denial-of-service via out-of-bounds check bypass in the API component

ESPHome web_server Plaintext Password Disclosure via JSON "value" Field