Basic auth bypass in esphome
ImpactAnyone with web_server enabled and HTTP basic auth configured on 2021.9.1 or older`web_server` allows OTA update without checking user defined basic auth username & passwordPatchesPatch released in 2021.9.2WorkaroundsDisable/remove `web_server`