esphome Helm chart

Name: esphome Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

jeffresc

Scored 14 Sept 2026

ESPHome is a system to control your microcontrollers by simple yet powerful configuration files and control them remotely through Home Automation systems.

Latest 0.2.2 4 months agoapp version 2026.4.0 0Artifact Hub

esphome 0.2.2 deploys 1 container image: ghcr.io/esphome/esphome. Across them, 450 findings — 2 critical, 3 high — 2 on CISA KEV. The highest contribution is DEBIAN-CVE-2025-48384 in git 1:2.39.5-0+deb12u2, fixed in 1:2.39.5-0+deb12u3.

Radar Score

5,0402370374

450 findings over 1 of 1 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/esphome/esphome	2026.4.0	2370374	5,040

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

374 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2025-69647	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-1390	libcap2@1:2.66-4	1:2.66-4+deb12u1
Low	DEBIAN-CVE-2026-50813	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2017-18018	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2025-11494	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-13757	p11-kit@0.24.1-2	no fix listed
Low	DEBIAN-CVE-2025-11412	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-11414	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-11850	krb5@1.20.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-56132	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-11081	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2025-66382	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56392	coreutils@9.1-1	no fix listed
Low	GHSA-8423-8fgw-73vq	tornado@6.5.5	6.5.8
Low	DEBIAN-CVE-2026-54370	acl@2.3.1-3	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-64506	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2025-10966	curl@7.88.1-10+deb12u12	no fix listed
Low	GHSA-x746-7m8f-x49c	starlette@0.52.1	1.1.0
Low	DEBIAN-CVE-2025-1152	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-15534	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2025-14017	curl@7.88.1-10+deb12u12	no fix listed
Low	DEBIAN-CVE-2026-32778	expat@2.5.0-1+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-56288	patch@2.7.6-7	no fix listed
Low	DEBIAN-CVE-2026-56289	patch@2.7.6-7	no fix listed
Low	PYSEC-2026-248	starlette@0.52.1	1.3.0
Low	DEBIAN-CVE-2025-69645	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-59997	openssh@1:9.2p1-2+deb12u5	no fix listed
Low	DEBIAN-CVE-2024-10041	pam@1.5.2-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u1	no fix listed
Low	DSA-6076-1	libpng1.6@1.6.39-2	1.6.39-2+deb12u1
Low	DEBIAN-CVE-2026-50812	sqlite3@3.40.1-2+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-69646	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-18938	p11-kit@0.24.1-2	no fix listed
Low	DEBIAN-CVE-2025-8225	binutils@2.40-2	no fix listed
Low	DEBIAN-CVE-2026-13595	util-linux@2.38.1-5+deb12u3	no fix listed
Low	DEBIAN-CVE-2025-27613	git@1:2.39.5-0+deb12u2	1:2.39.5-0+deb12u3
Low	DEBIAN-CVE-2025-5278	coreutils@9.1-1	no fix listed
Low	DEBIAN-CVE-2026-22795	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2
Low	DEBIAN-CVE-2025-28162	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2025-28164	libpng1.6@1.6.39-2	no fix listed
Low	DEBIAN-CVE-2026-42770	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
Low	DEBIAN-CVE-2026-55654	openssh@1:9.2p1-2+deb12u5	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u1	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-15649	perl@5.36.0-7+deb12u2	no fix listed
Low	DEBIAN-CVE-2010-4756	glibc@2.36-9+deb12u13	no fix listed
Low	GHSA-jp4c-xjxw-mgf9	pip@26.0.1	26.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.2.2latest	4 months ago	2026.4.0	2370374	5,040

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/jeffresc/esphome.svg)](https://charts.stackradar.io/charts/jeffresc/esphome)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.