home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 yesterdayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4342	stdlib@go1.23.3	1.24.12
Low	GO-2025-3751	stdlib@go1.23.3	1.23.10
Low	GHSA-537c-gmf6-5ccf	cryptography@47.0.0	48.0.1
Low	GHSA-69qj-pvh9-c5wg	yt-dlp@2026.3.17	2026.6.9
Low	GHSA-82j2-j2ch-gfr8	rustls-webpki@0.103.12	0.103.13
Low	RUSTSEC-2026-0194	quick-xml@0.39.2	0.41.0
Low	RUSTSEC-2026-0195	quick-xml@0.39.2	0.41.0
Low	ALPINE-CVE-2026-45446	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2025-4116	golang.org/x/crypto@v0.26.0	0.43.0
Low	GO-2026-4870	stdlib@go1.23.3	1.25.9
Low	GO-2025-4009	stdlib@go1.23.3	1.24.8
Low	GO-2026-4947	stdlib@go1.23.3	1.25.9
Low	ALPINE-CVE-2026-33947	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-4006	stdlib@go1.23.3	1.24.8
Low	ALPINE-CVE-2026-56412	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-33948	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5037	stdlib@go1.23.3	1.25.11
Low	GO-2026-4971	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-50219	expat@2.7.5-r0	2.8.2-r0
Low	ALPINE-CVE-2026-56409	expat@2.7.5-r0	2.8.2-r0
Low	GO-2026-5972	stdlib@go1.23.3	1.25.13
Low	GO-2026-6088	stdlib@go1.23.3	1.25.13
Low	GO-2026-6089	stdlib@go1.23.3	1.25.13
Low	GO-2026-6090	stdlib@go1.23.3	1.25.13
Low	GO-2026-5038	stdlib@go1.23.3	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.49.0	0.56.0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	GO-2025-4012	stdlib@go1.23.3	1.24.8
Low	GO-2025-3956	stdlib@go1.23.3	1.23.12
Low	GO-2025-4011	stdlib@go1.23.3	1.24.8
Low	GO-2025-4015	stdlib@go1.23.3	1.24.8
Low	GO-2026-6218	stdlib@go1.23.3	1.25.13
Low	GHSA-3cv2-h65g-fgmm	astral-tokio-tar@0.6.0	0.6.2
Low	GHSA-vfvv-c25p-m7mm	rkyv@0.8.15	0.8.16
Low	GHSA-xx64-wwv2-hcqq	astral-tokio-tar@0.6.0	0.6.1
Low	GHSA-x746-7m8f-x49c	starlette@1.0.0	1.1.0
Low	GHSA-3496-9g83-7v6x	sqlparse@0.5.5	0.6.0
Low	GO-2025-3373	stdlib@go1.23.3	1.22.11
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2025-4155	stdlib@go1.23.3	1.24.11
Low	GO-2025-4008	stdlib@go1.23.3	1.24.8
Low	GO-2025-4010	stdlib@go1.23.3	1.24.8
Low	PYSEC-2026-248	starlette@1.0.0	1.3.0
Low	GHSA-crqm-m339-7m2p	pyzipper@0.3.6	0.4.0
Low	GHSA-4xgf-cpjx-pc3j	pydantic-settings@2.14.1	2.14.2
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-4014	stdlib@go1.23.3	1.24.8
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	yesterday	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.