StackRadar

esphome Helm chart

geek-cookbookVerified publisher

Scored 14 Sept 2026

ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.

Latest 8.4.2 4 years agoapp version 1.18.0 2Artifact Hub

esphome 8.4.2 deploys 1 container image: esphome/esphome. Across them, 233 findings2 critical, 4 high 5 on CISA KEV. The highest contribution is GHSA-j7hp-h8jx-5ppr in pillow 5.4.1, fixed in 10.0.1. Chart.yaml declares kubeVersion >=1.16.0-0; rendered for Kubernetes 1.16.0.

Radar Score

3,7172485141

233 findings over 1 of 1 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
esphome/esphome1.18.024851413,717

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

85 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-pw3c-h7wp-cvhxpillow@5.4.19.0.0
MediumGHSA-p43w-g3c5-g5mqpillow@5.4.18.1.1
MediumGHSA-j8r2-6x86-q33qrequests@2.25.12.31.0
MediumDSA-4944-1krb5@1.17-3+deb10u11.17-3+deb10u2
MediumPYSEC-2023-192urllib3@1.26.42.0.6
MediumDSA-4881-1curl@7.64.0-4+deb10u17.64.0-4+deb10u2
MediumGHSA-mvg9-xffr-p774pillow@5.4.18.2.0
MediumPYSEC-2024-60idna@2.103.7
MediumGHSA-f5g8-5qq7-938wpillow@5.4.18.1.0
MediumDSA-4942-1systemd@241-7~deb10u6241-7~deb10u8
MediumGHSA-74m5-2c7w-9w3xstarlette@0.14.20.25.0
MediumGHSA-8843-m7mw-mxqmpillow@5.4.17.1.0
MediumGHSA-9v9h-cgj8-h64pcryptography@2.6.142.0.2
MediumGHSA-m2vv-5vj5-2hm7pillow@5.4.19.2.0
MediumGHSA-xrcv-f9gm-v42cpillow@5.4.19.0.0
MediumGHSA-8gq9-2x98-w8hfprotobuf@3.15.83.18.3
MediumGHSA-48mj-p7x2-5jfmesphome@1.18.02021.9.2
MediumGHSA-hggm-jpg3-v476cryptography@2.6.13.2
MediumGHSA-2xpw-w6gg-jr37urllib3@1.26.42.6.0
MediumGHSA-gm62-xv2j-4w53urllib3@1.26.42.6.0
MediumGHSA-8ghj-p4vj-mr35pillow@5.4.110.0.0
MediumGHSA-3ww4-gg4f-jr7fcryptography@2.6.142.0.0
MediumGHSA-9hx2-hgq2-2g4fpillow@5.4.18.1.1
MediumGHSA-8w49-h785-mj3ctornado@6.16.4.2
MediumGHSA-vqfr-h8mv-ghfjh11@0.12.00.16.0
MediumDLA-3530-1openssl@1.1.1d-0+deb10u51.1.1n-0+deb10u6
MediumDLA-3213-1krb5@1.17-3+deb10u11.17-3+deb10u5
MediumGHSA-wj6h-64fc-37mpecdsa@0.16.1no fix listed
MediumDLA-3613-1curl@7.64.0-4+deb10u17.64.0-4+deb10u7
MediumGHSA-7gcm-g887-7qv7protobuf@3.15.85.29.6
MediumDLA-3175-1python3.7@3.7.3-2+deb10u23.7.3-2+deb10u4
MediumGHSA-w7pp-m8wf-vj6rcryptography@2.6.139.0.1
MediumPYSEC-2024-225cryptography@2.6.142.0.4
MediumDLA-3152-1glibc@2.28-102.28-10+deb10u2
MediumGHSA-5xp3-jfq3-5q8xpip@18.121.1

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
8.4.2latest4 years ago1.18.024851413,717

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/geek-cookbook/esphome.svg)](https://charts.stackradar.io/charts/geek-cookbook/esphome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 5 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.