home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 todayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

312 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	GHSA-86qp-5c8j-p5mrKEV	starlette@1.0.0	1.0.1
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.47.0	0.52.0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.6-r0	3.5.7-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.26.0	0.31.0
Medium	ALPINE-CVE-2026-55200	libssh2@1.11.1-r0	1.11.1-r2
Medium	ALPINE-CVE-2026-3593	bind@9.20.22-r0	9.20.23-r0
Medium	ALPINE-CVE-2021-27219	glib@2.84.4-r0	2.66.6-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-5946	bind@9.20.22-r0	9.20.23-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.6-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-56123	socat@1.8.0.3-r1	1.8.1.2-r0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.47.0	0.52.0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.6-r0	3.5.7-r0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.47.0	0.52.0
Medium	GHSA-5hxg-r395-fqxx	homeassistant@2026.5.1	2026.6.0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.6-r0	3.5.7-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.47.0	0.52.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3039	bind@9.20.22-r0	9.20.23-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.6-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.6-r0	3.5.8-r0
Medium	GHSA-wj6h-64fc-37mp	ecdsa@0.19.2	no fix listed
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.47.0	0.52.0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.26.0	0.35.0
Medium	ALPINE-CVE-2026-55199	libssh2@1.11.1-r0	1.11.1-r2
Medium	ALPINE-CVE-2026-66046	expat@2.7.5-r0	2.8.4-r0
Medium	GHSA-c6mh-fpjc-4pr3	yt-dlp@2026.3.17	2026.6.9
Medium	GHSA-7gcm-g887-7qv7	protobuf@6.32.0	6.33.5
Low	PYSEC-2026-2132	click@8.1.8	8.3.3
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.47.0	0.52.0
Low	ALPINE-CVE-2026-14456	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-9076	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-62p4-gmf7-7g93	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-63072	openssl@3.5.6-r0	3.5.8-r0
Low	ALPINE-CVE-2026-5947	bind@9.20.22-r0	9.20.23-r0
Low	PYSEC-2026-3452	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-32316	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-6732	libxml2@2.13.9-r0	2.13.9-r1
Low	GHSA-vx4q-3cr2-7cg2	yt-dlp@2026.3.17	2026.6.9
Low	GHSA-2wxc-x7rj-hg8f	asyncssh@2.21.0	2.23.1
Low	GHSA-g3cq-j2xw-wf74	aiohttp@3.13.5	3.14.1
Low	GHSA-vjc4-5qp5-m44j	pillow@12.2.0	12.3.0
Low	GHSA-4w2j-m93h-cj5j	quinn-proto@0.11.14	0.11.15
Low	ALPINE-CVE-2026-45445	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-xj96-63gp-2gmr	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-76641	expat@2.7.5-r0	2.8.4-r0
Low	GHSA-ffg3-p8fm-mjx2	restrictedpython@8.1	8.3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	today	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.