StackRadar

home-assistant 2026.5.1 Helm chart

loeken-at-homeVerified publisher

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 todayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings0 critical, 1 high 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
loeken/home-assistant2026.5.101292813,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

29 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-5cgq-3rg8-m6cvgolang.org/x/crypto@v0.47.00.52.0
MediumALPINE-CVE-2026-45447openssl@3.5.6-r03.5.7-r0
MediumGHSA-v778-237x-gjrcgolang.org/x/crypto@v0.26.00.31.0
MediumALPINE-CVE-2026-55200libssh2@1.11.1-r01.11.1-r2
MediumALPINE-CVE-2026-3593bind@9.20.22-r09.20.23-r0
MediumALPINE-CVE-2021-27219glib@2.84.4-r02.66.6-r0
MediumALPINE-CVE-2026-63073openssl@3.5.6-r03.5.8-r0
MediumALPINE-CVE-2026-5946bind@9.20.22-r09.20.23-r0
MediumALPINE-CVE-2026-18798openssl@3.5.6-r03.5.8-r0
MediumALPINE-CVE-2026-63076openssl@3.5.6-r03.5.8-r0
MediumALPINE-CVE-2026-56123socat@1.8.0.3-r11.8.1.2-r0
MediumGHSA-x527-x647-q7gggolang.org/x/crypto@v0.47.00.52.0
MediumALPINE-CVE-2026-42764openssl@3.5.6-r03.5.7-r0
MediumGHSA-vgwf-h737-ff37golang.org/x/crypto@v0.47.00.52.0
MediumGHSA-5hxg-r395-fqxxhomeassistant@2026.5.12026.6.0
MediumALPINE-CVE-2026-34182openssl@3.5.6-r03.5.7-r0
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.47.00.52.0
MediumALPINE-CVE-2026-34183openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-3039bind@9.20.22-r09.20.23-r0
MediumALPINE-CVE-2026-34180openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-7383openssl@3.5.6-r03.5.7-r0
MediumALPINE-CVE-2026-14457openssl@3.5.6-r03.5.8-r0
MediumGHSA-wj6h-64fc-37mpecdsa@0.19.2no fix listed
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.47.00.52.0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.26.00.35.0
MediumALPINE-CVE-2026-55199libssh2@1.11.1-r01.11.1-r2
MediumALPINE-CVE-2026-66046expat@2.7.5-r02.8.4-r0
MediumGHSA-c6mh-fpjc-4pr3yt-dlp@2026.3.172026.6.9
MediumGHSA-7gcm-g887-7qv7protobuf@6.32.06.33.5

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
2026.5.1latesttoday2026.5.101292813,013
2026.4.43 days ago2026.4.4

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 16 Sept 2026 · scanned 16 Sept 2026 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.