home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 yesterdayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-g6cj-pr64-35w5	cryptography@47.0.0	50.0.0
Low	ALPINE-CVE-2026-34181	openssl@3.5.6-r0	3.5.7-r0
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-h35f-9h28-mq5c	setuptools@81.0.0	83.0.0
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.49.0	0.55.0
Low	GHSA-fj7v-r99m-22gq	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-10723	bind@9.20.22-r0	9.20.26-r0
Low	GHSA-4cc2-g9w2-fhf6	zeep@4.3.2	4.3.3
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.26.0	0.45.0
Low	GHSA-qr67-gv47-xwwh	asyncssh@2.21.0	2.23.1
Low	PYSEC-2026-3721	pip@25.3	26.2
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.13.5	3.14.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.26.0	0.45.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-f7j3-774f-rfhj	yt-dlp@2026.3.17	2026.6.9
Low	ALPINE-CVE-2026-0799	libpcap@1.10.5-r1	1.10.7-r0
Low	PYSEC-2026-2104	aiohttp@3.13.5	3.14.0
Low	GHSA-qc2x-6f54-m6h9	zeroconf@0.148.0	0.149.16
Low	GHSA-6hr6-w5qg-qmwg	h2@4.3.0	4.4.1
Low	GHSA-fp55-jw48-c537	astral-tokio-tar@0.6.0	0.6.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.47.0	0.52.0
Low	GHSA-65pc-fj4g-8rjx	idna@3.13	3.15
Low	ALPINE-CVE-2026-3592	bind@9.20.22-r0	9.20.23-r0
Low	ALPINE-CVE-2026-42769	openssl@3.5.6-r0	3.5.7-r0
Low	ALPINE-CVE-2026-78408	util-linux@2.41-r9	2.41.6-r1
Low	GHSA-34rh-wp3j-6cxc	github.com/pion/stun/v3@v3.1.1	3.1.5
Low	GHSA-w7vc-732c-9m39	pyjwt@2.12.1	2.13.0
Low	ALPINE-CVE-2026-49839	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4981	stdlib@go1.23.3	1.25.10
Low	GO-2025-3563	stdlib@go1.23.3	1.23.8
Low	GO-2026-4977	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-76957	expat@2.7.5-r0	2.8.4-r0
Low	GO-2026-4986	stdlib@go1.23.3	1.25.10
Low	GO-2026-4918	stdlib@go1.23.3	1.25.10
Low	GO-2026-4918	golang.org/x/net@v0.49.0	0.53.0
Low	GO-2026-4337	stdlib@go1.23.3	1.24.13
Low	GO-2026-4601	stdlib@go1.23.3	1.25.8
Low	ALPINE-CVE-2026-56403	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56404	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56405	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56408	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56406	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56407	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56410	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56411	expat@2.7.5-r0	2.8.2-r0
Low	GO-2026-5026	stdlib@go1.23.3	1.25.13
Low	GO-2026-5026	golang.org/x/net@v0.49.0	0.55.0
Low	ALPINE-CVE-2025-14104	util-linux@2.41-r9	2.41.6-r0
Low	GO-2025-3420	stdlib@go1.23.3	1.22.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	yesterday	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.