StackRadar

esphome Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.

Latest 8.4.2 4 years agoapp version 1.18.0 2Artifact Hub

esphome 8.4.2 deploys 1 container image: esphome/esphome. Across them, 233 findings2 critical, 4 high 5 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 5.4.1, fixed in 10.0.1. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

3,7172485141

233 findings over 1 of 1 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
esphome/esphome1.18.024851413,717

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

85 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumDSA-5169-1openssl@1.1.1d-0+deb10u51.1.1n-0+deb10u3
MediumDLA-3145-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u4
MediumDLA-3807-1glibc@2.28-102.28-10+deb10u3
MediumDSA-4963-1openssl@1.1.1d-0+deb10u51.1.1d-0+deb10u7
MediumDLA-3804-1nghttp2@1.36.0-2+deb10u11.36.0-2+deb10u3
MediumDSA-5139-1openssl@1.1.1d-0+deb10u51.1.1n-0+deb10u2
MediumDLA-3449-1openssl@1.1.1d-0+deb10u51.1.1n-0+deb10u5
MediumDSA-5103-1openssl@1.1.1d-0+deb10u51.1.1d-0+deb10u8
MediumDSA-5140-1openldap@2.4.47+dfsg-3+deb10u62.4.47+dfsg-3+deb10u7
MediumDSA-4875-1openssl@1.1.1d-0+deb10u51.1.1d-0+deb10u6
MediumGHSA-r7rm-8j6h-r933pillow@5.4.16.2.2
MediumDLA-3325-1openssl@1.1.1d-0+deb10u51.1.1n-0+deb10u4
MediumDLA-3282-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u7
MediumGHSA-p49h-hjvm-jg3hpillow@5.4.16.2.2
MediumDLA-3844-1git@1:2.20.1-2+deb10u31:2.20.1-2+deb10u9
MediumDSA-5111-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u1
MediumGHSA-8vj2-vxx3-667wpillow@5.4.19.0.1
MediumGHSA-7534-mm45-c74vpillow@5.4.18.3.0
MediumDSA-5085-1expat@2.2.6-2+deb10u12.2.6-2+deb10u3
MediumGHSA-77gc-v2xv-rvvhpillow@5.4.18.2.0
MediumGHSA-57h3-9rgr-c24mpillow@5.4.18.1.1
MediumGHSA-9j59-75qj-795wpillow@5.4.19.0.1
MediumDLA-3085-1curl@7.64.0-4+deb10u17.64.0-4+deb10u3
MediumGHSA-3wvg-mj6g-m9cvpillow@5.4.18.1.2
MediumGHSA-xhp9-4947-rq78bottle@0.12.190.12.20
MediumGHSA-rwv7-3v45-hg29pillow@5.4.18.2.0
MediumGHSA-q2q7-5pp4-w6pgurllib3@1.26.41.26.5
MediumGHSA-vcqg-3p29-xw73pillow@5.4.16.2.2
MediumGHSA-98vv-pw6r-q6q4pillow@5.4.18.3.2
MediumGHSA-f4w8-cv6p-x6r5pillow@5.4.18.1.2
MediumGHSA-43fq-w8qq-v88hpillow@5.4.17.1.0
MediumGHSA-j7mj-748x-7p78pillow@5.4.16.2.0
MediumGHSA-cx63-2mw6-8hw5setuptools@40.8.070.0.0
MediumGHSA-95q3-8gr9-gm8wpillow@5.4.18.1.2
MediumGHSA-gpvv-69j7-gwj8pip@18.119.2
MediumGHSA-38jv-5279-wg99urllib3@1.26.42.6.3
MediumGHSA-vqcj-wrf2-7v73pillow@5.4.18.1.0
MediumDLA-3103-1zlib@1:1.2.11.dfsg-11:1.2.11.dfsg-1+deb10u2
MediumGHSA-qwmp-2cf2-g9g6wheel@0.36.20.38.1
MediumGHSA-r9hx-vwmv-q579setuptools@40.8.065.5.1
MediumGHSA-7r7m-5h27-29hppillow@5.4.18.2.0
MediumPYSEC-2025-49setuptools@40.8.078.1.1
MediumGHSA-8xjq-8fcg-g5hwpillow@5.4.18.1.1
MediumGHSA-q5hq-fp76-qmrcpillow@5.4.18.2.0
MediumGHSA-hj69-c76v-86wrpillow@5.4.16.2.2
MediumGHSA-3f63-hfp8-52jqpillow@5.4.110.2.0
MediumGHSA-5gm3-px64-rw72pillow@5.4.16.2.2
MediumGHSA-mxh2-ccgj-8635esphome@1.18.02025.8.1
MediumDLA-3559-1libssh2@1.8.0-2.11.8.0-2.1+deb10u1
MediumDLA-3477-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.4.2latest4 years ago1.18.024851413,717

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/esphome.svg)](https://charts.stackradar.io/charts/geek-cookbook/esphome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.