home-assistant Helm chart

Name: home-assistant Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

alekc

Scored 14 Sept 2026

Home Assistant on Kubernetes with automatic upstream version tracking, LAN-discovery host networking, and declarative /config management.

Latest 2.11.2 2 days agoapp version 2026.9.2 4Artifact Hub

home-assistant 2.11.2 deploys 1 container image: ghcr.io/home-assistant/home-assistant. Across them, 223 findings — 0 critical, 0 high. The highest contribution is GHSA-5cgq-3rg8-m6cv in golang.org/x/crypto v0.26.0, fixed in 0.52.0.

Radar Score

2,1330025198

223 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/home-assistant/home-assistant	2026.9.2	0025198	2,133

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

198 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-76956	expat@2.8.1-r0	2.8.4-r0
Low	GHSA-prg7-hcfm-mfcr	sqlparse@0.5.5	0.6.0
Low	ALPINE-CVE-2026-9080	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-9545	curl@8.20.0-r1	8.21.0-r0
Low	ALPINE-CVE-2026-76642	util-linux@2.42.1-r0	2.42.3-r0
Low	GHSA-m2h6-j472-rp4c	cryptography@48.0.1	49.0.0
Low	ALPINE-CVE-2026-10822	bind@9.20.23-r0	9.20.26-r0
Low	GHSA-vj7q-gjh5-988w	mcp@1.26.0	1.28.1
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	GHSA-g6cj-pr64-35w5	cryptography@48.0.1	50.0.0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.26.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@81.0.0	83.0.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.49.0	0.55.0
Low	ALPINE-CVE-2026-10723	bind@9.20.23-r0	9.20.26-r0
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.26.0	0.45.0
Low	GHSA-qr67-gv47-xwwh	asyncssh@2.21.0	2.23.1
Low	PYSEC-2026-3721	pip@26.0.1	26.2
Low	ALPINE-CVE-2026-60001	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.26.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.26.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.26.0	0.52.0
Low	ALPINE-CVE-2026-0799	libpcap@1.10.6-r1	1.10.7-r0
Low	ALPINE-CVE-2026-59999	openssh@10.3_p1-r0	10.3_p1-r1
Low	GHSA-6hr6-w5qg-qmwg	h2@4.3.0	4.4.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.26.0	0.52.0
Low	ALPINE-CVE-2026-78408	util-linux@2.42.1-r0	2.42.3-r1
Low	GHSA-34rh-wp3j-6cxc	github.com/pion/stun/v3@v3.1.1	3.1.5
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4981	stdlib@go1.25.6	1.25.10
Low	GO-2025-3563	stdlib@go1.23.3	1.23.8
Low	GO-2026-4977	stdlib@go1.25.6	1.25.10
Low	ALPINE-CVE-2026-76957	expat@2.8.1-r0	2.8.4-r0
Low	GO-2026-4986	stdlib@go1.25.6	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.49.0	0.53.0
Low	GO-2026-4918	stdlib@go1.25.6	1.25.10
Low	GO-2026-4337	stdlib@go1.25.6	1.24.13
Low	ALPINE-CVE-2026-59998	openssh@10.3_p1-r0	10.3_p1-r1
Low	GO-2026-4601	stdlib@go1.25.6	1.25.8
Low	ALPINE-CVE-2026-56403	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.8.1-r0	2.8.2-r0
Low	ALPINE-CVE-2026-78410	util-linux@2.42.1-r0	2.42.3-r0
Low	GO-2026-5026	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5026	stdlib@go1.25.6	1.25.13
Low	GO-2025-3420	stdlib@go1.23.3	1.22.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2.11.2latest	2 days ago	2026.9.2	0025198	2,133
2.11.1	9 days ago	2026.9.1	0025198	2,133

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/alekc/home-assistant.svg)](https://charts.stackradar.io/charts/alekc/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.