home-assistant 16.3.1 Helm chart

Name: home-assistant Helm chart 16.3.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

k8s-home-lab-repo

Scored 14 Sept 2026

Home Assistant

Version 16.3.1 4 months agoapp version 2026.3.1 2Artifact Hub

home-assistant 16.3.1 deploys 1 container image: ghcr.io/home-operations/home-assistant. Across them, 441 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.52.1, fixed in 1.0.1. Chart.yaml declares kubeVersion >=1.32.0; rendered for Kubernetes 1.32.0.

Radar Score

4,6340156383

441 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/home-operations/home-assistant	2026.3.1	0156383	4,634

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

441 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-537c-gmf6-5ccf	cryptography@46.0.5	48.0.1
Low	GHSA-69qj-pvh9-c5wg	yt-dlp@2026.2.21	2026.6.9
Low	ALPINE-CVE-2026-45446	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-7009	curl@8.17.0-r1	8.20.0-r0
Low	GO-2025-4116	golang.org/x/crypto@v0.26.0	0.43.0
Low	GO-2026-4870	stdlib@go1.25.6	1.25.9
Low	GO-2025-4009	stdlib@go1.23.3	1.24.8
Low	GO-2026-4947	stdlib@go1.25.6	1.25.9
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-4006	stdlib@go1.23.3	1.24.8
Low	ALPINE-CVE-2026-56412	expat@2.7.4-r0	2.8.2-r0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5037	stdlib@go1.25.6	1.25.11
Low	GO-2026-4971	stdlib@go1.25.6	1.25.10
Low	ALPINE-CVE-2026-14672	postgresql18@18.2-r0	18.5-r0
Low	ALPINE-CVE-2026-50219	expat@2.7.4-r0	2.8.2-r0
Low	ALPINE-CVE-2026-25834	mbedtls@3.6.5-r0	3.6.6-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.4-r0	2.8.2-r0
Low	GO-2026-5972	stdlib@go1.25.6	1.25.13
Low	GO-2026-6088	stdlib@go1.25.6	1.25.13
Low	GO-2026-6089	stdlib@go1.25.6	1.25.13
Low	GO-2026-6090	stdlib@go1.25.6	1.25.13
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	ALPINE-CVE-2026-32777	expat@2.7.4-r0	2.7.5-r0
Low	GO-2026-5038	stdlib@go1.25.6	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.49.0	0.56.0
Low	ALPINE-CVE-2026-56132	expat@2.7.4-r0	2.8.2-r0
Low	GO-2025-4012	stdlib@go1.23.3	1.24.8
Low	GO-2025-3956	stdlib@go1.23.3	1.23.12
Low	GO-2025-4011	stdlib@go1.23.3	1.24.8
Low	GO-2025-4015	stdlib@go1.23.3	1.24.8
Low	GO-2026-6218	stdlib@go1.25.6	1.25.13
Low	ALPINE-CVE-2026-40930	libpng@1.6.55-r0	1.6.58-r1
Low	GHSA-x746-7m8f-x49c	starlette@0.52.1	1.1.0
Low	GHSA-3496-9g83-7v6x	sqlparse@0.5.5	0.6.0
Low	GO-2025-3373	stdlib@go1.23.3	1.22.11
Low	PYSEC-2026-2275	requests@2.32.5	2.33.0
Low	ALPINE-CVE-2026-42768	openssl@3.5.5-r0	3.5.7-r0
Low	GO-2025-4155	stdlib@go1.23.3	1.24.11
Low	ALPINE-CVE-2025-14017	curl@8.17.0-r1	8.18.0-r0
Low	GHSA-w8p2-r796-3vmq	authlib@1.6.9	1.6.10
Low	ALPINE-CVE-2026-32778	expat@2.7.4-r0	2.7.5-r0
Low	GO-2025-4008	stdlib@go1.23.3	1.24.8
Low	GO-2025-4010	stdlib@go1.23.3	1.24.8
Low	PYSEC-2026-248	starlette@0.52.1	1.3.0
Low	GHSA-crqm-m339-7m2p	pyzipper@0.3.6	0.4.0
Low	GHSA-4xgf-cpjx-pc3j	pydantic-settings@2.13.1	2.14.2
Low	ALPINE-CVE-2026-32776	expat@2.7.4-r0	2.7.5-r0
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
16.3.1latest	4 months ago	2026.3.1	0156383	4,634

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/k8s-home-lab-repo/home-assistant.svg)](https://charts.stackradar.io/charts/k8s-home-lab-repo/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.