home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 yesterdayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

281 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-5029	golang.org/x/net@v0.49.0	0.55.0
Low	GO-2026-5030	golang.org/x/net@v0.49.0	0.55.0
Low	GHSA-58qw-9mgm-455v	pip@25.3	26.1
Low	ALPINE-CVE-2026-43895	jq@1.8.1-r0	1.8.2-r0
Low	GHSA-6jv3-5f52-599m	python-multipart@0.0.27	0.0.30
Low	GO-2026-4602	stdlib@go1.23.3	1.25.8
Low	ALPINE-CVE-2026-27456	util-linux@2.41-r9	2.41.6-r0
Low	ALPINE-CVE-2026-25832	mbedtls@3.6.6-r0	3.6.7-r0
Low	ALPINE-CVE-2026-41080	expat@2.7.5-r0	2.8.1-r0
Low	GHSA-g75f-g53v-794x	bleach@6.3.0	no fix listed
Low	GO-2026-5024	golang.org/x/sys@v0.40.0	0.44.0
Low	GO-2026-5932	golang.org/x/crypto@v0.47.0	no fix listed
Low	RUSTSEC-2024-0436	paste@1.0.14	no fix listed
Low	RUSTSEC-2026-0097	rand@0.9.2	0.8.6
Low	RUSTSEC-2026-0104	rustls-webpki@0.103.12	0.103.13
Low	RUSTSEC-2026-0112	astral-tokio-tar@0.6.0	0.6.1
Low	RUSTSEC-2026-0113	astral-tokio-tar@0.6.0	0.6.1
Low	RUSTSEC-2026-0122	rkyv@0.8.15	0.8.16
Low	RUSTSEC-2026-0145	astral-tokio-tar@0.6.0	0.6.2
Low	RUSTSEC-2026-0186	memmap2@0.9.10	0.9.11
Low	RUSTSEC-2026-0190	anyhow@1.0.98	1.0.103
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0221	event-listener@5.4.1	5.4.2
Low	RUSTSEC-2026-0233	rkyv@0.8.15	0.8.17
Low	RUSTSEC-2026-0234	rkyv@0.8.15	0.8.17
Low	RUSTSEC-2026-0235	rkyv@0.8.15	0.8.17
Low	RUSTSEC-2026-0258	h2@0.4.13	0.4.16
Low	GHSA-r374-rxx8-8654	paramiko@3.5.0	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@25.3	26.0
Low	GHSA-cq8v-f236-94qc	rand@0.9.2	0.9.3
Low	ALPINE-CVE-2025-11961	libpcap@1.10.5-r1	1.10.7-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	yesterday	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.