home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 yesterdayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2025-3503	stdlib@go1.23.3	1.23.7
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4976	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5856	stdlib@go1.23.3	1.25.12
Low	GHSA-wphv-vfrh-23q5	joserfc@1.6.5	1.6.7
Low	GO-2025-4007	stdlib@go1.23.3	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4980	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2026-5039	stdlib@go1.23.3	1.25.11
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-3849	stdlib@go1.23.3	1.23.12
Low	GO-2025-4013	stdlib@go1.23.3	1.24.8
Low	GO-2026-4946	stdlib@go1.23.3	1.25.9
Low	GHSA-gj48-438w-jh9v	bleach@6.3.0	6.4.0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	GO-2026-4603	stdlib@go1.23.3	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.47.0	0.55.0
Low	GHSA-jp4c-xjxw-mgf9	pip@25.3	26.1
Low	GO-2026-6354	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4982	stdlib@go1.23.3	1.25.10
Low	GHSA-jq35-7prp-9v3f	pyjwt@2.12.1	2.13.0
Low	GO-2026-6091	stdlib@go1.23.3	1.25.13
Low	GO-2025-3750	stdlib@go1.23.3	1.23.10
Low	GO-2026-4864	stdlib@go1.23.3	1.25.9
Low	GO-2025-3447	stdlib@go1.23.3	1.22.12
Low	GO-2026-4865	stdlib@go1.23.3	1.25.9
Low	GO-2026-4869	stdlib@go1.23.3	1.25.9
Low	GO-2026-4340	stdlib@go1.23.3	1.24.12
Low	GO-2025-4175	stdlib@go1.23.3	1.24.11
Low	GHSA-fhv5-28vv-h8m8	pyjwt@2.12.1	2.13.0
Low	GHSA-v9pg-7xvm-68hf	python-multipart@0.0.27	0.0.31
Low	ALPINE-CVE-2026-54679	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-3pv8-6f4r-ffg2	tar@0.4.45	0.4.46
Low	GHSA-4gg8-gxpx-9rph	uv@0.11.8	0.11.15
Low	GHSA-4gg8-gxpx-9rph	uv@0.11.8	0.11.15
Low	GHSA-cfqr-cjx5-5jcm	sqlparse@0.5.5	0.6.0
Low	GHSA-993g-76c3-p5m4	pyjwt@2.12.1	2.13.0
Low	GHSA-4x4j-2g7c-83w6	pillow@12.2.0	12.3.0
Low	ALPINE-CVE-2026-31911	libpcap@1.10.5-r1	1.10.7-r0
Low	ALPINE-CVE-2026-31912	libpcap@1.10.5-r1	1.10.7-r0
Low	ALPINE-CVE-2026-6244	libpcap@1.10.5-r1	1.10.7-r0
Low	ALPINE-CVE-2026-6554	libpcap@1.10.5-r1	1.10.7-r0
Low	GO-2026-4403	stdlib@go1.23.3	1.23.9
Low	GO-2026-5025	golang.org/x/net@v0.49.0	0.55.0
Low	RUSTSEC-2026-0285	rustls@0.23.38	0.23.45
Low	GO-2026-4970	stdlib@go1.23.3	1.25.12
Low	GHSA-vffw-93wf-4j4q	python-multipart@0.0.27	0.0.30
Low	GO-2026-5027	golang.org/x/net@v0.49.0	0.55.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	yesterday	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.