esphome Helm chart

Name: esphome Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

gabe565

Scored 14 Sept 2026

ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.

Latest 0.15.0 2 years agoapp version latest 0Artifact Hub

esphome 0.15.0 deploys 1 container image: ghcr.io/esphome/esphome. Across them, 296 findings — 0 critical, 2 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.52.1, fixed in 1.0.1. Chart.yaml declares kubeVersion >=1.22.0-0; rendered for Kubernetes 1.22.0.

Radar Score

3,1120242251

296 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/esphome/esphome	latest	0242251	3,112

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

251 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-41991	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-19548	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1148	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-15003	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-6845	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1150	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-73282	openssh@1:10.0p1-7+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-89092	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-18374	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6844	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1149	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-16742	systemd@257.13-1~deb13u1	no fix listed
Low	GHSA-4gg8-gxpx-9rph	uv@0.10.1	0.11.15
Low	DEBIAN-CVE-2025-69644	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-15224	curl@8.14.1-2+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-22185	openldap@2.6.10+dfsg-1	no fix listed
Low	DEBIAN-CVE-2026-3713	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-42250	bzip2@1.0.8-6	no fix listed
Low	DEBIAN-CVE-2026-39113	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-27456	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-18508	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-41080	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2011-3374	apt@3.0.3	no fix listed
Low	DEBIAN-CVE-2025-1181	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1180	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.17.4-2	no fix listed
Low	DEBIAN-CVE-2025-1151	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2025-1182	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-18477	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-73281	openssh@1:10.0p1-7+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-53612	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53613	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53614	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-53615	util-linux@2.41-5	2.41.5-0+deb13u1
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-40228	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2025-50422	cairo@1.18.4-1+b1	no fix listed
Low	DEBIAN-CVE-2011-4116	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.10-4	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.7.1-2	2.8.2-1~deb13u1
Low	DEBIAN-CVE-2026-89162	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-89156	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2025-66861	binutils@2.44-3	no fix listed
Low	DEBIAN-CVE-2026-73283	openssh@1:10.0p1-7+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-6368	glibc@2.41-12+deb13u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.15.0latest	2 years ago	latest	0242251	3,112

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/gabe565/esphome.svg)](https://charts.stackradar.io/charts/gabe565/esphome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.