home-assistant 2026.5.1 Helm chart

Name: home-assistant Helm chart 2026.5.1: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

loeken-at-home

Scored 16 Sept 2026

home-assistant - a free and open-source software for home automation designed to be a central control system for smart home devices with a focus on local control and privacy

Version 2026.5.1 yesterdayapp version 2026.5.1 1Artifact Hub

home-assistant 2026.5.1 deploys 1 container image: loeken/home-assistant. Across them, 312 findings — 0 critical, 1 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 1.0.0, fixed in 1.0.1.

Radar Score

3,0130129281

312 findings over 1 of 1 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
loeken/home-assistant	2026.5.1	0129281	3,013

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

312 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-5972	stdlib@go1.23.3	1.25.13
Low	GO-2026-6088	stdlib@go1.23.3	1.25.13
Low	GO-2026-6089	stdlib@go1.23.3	1.25.13
Low	GO-2026-6090	stdlib@go1.23.3	1.25.13
Low	GO-2026-5038	stdlib@go1.23.3	1.25.11
Low	GO-2026-5942	golang.org/x/net@v0.49.0	0.56.0
Low	ALPINE-CVE-2026-56132	expat@2.7.5-r0	2.8.2-r0
Low	GO-2025-4012	stdlib@go1.23.3	1.24.8
Low	GO-2025-3956	stdlib@go1.23.3	1.23.12
Low	GO-2025-4011	stdlib@go1.23.3	1.24.8
Low	GO-2025-4015	stdlib@go1.23.3	1.24.8
Low	GO-2026-6218	stdlib@go1.23.3	1.25.13
Low	GHSA-3cv2-h65g-fgmm	astral-tokio-tar@0.6.0	0.6.2
Low	GHSA-vfvv-c25p-m7mm	rkyv@0.8.15	0.8.16
Low	GHSA-xx64-wwv2-hcqq	astral-tokio-tar@0.6.0	0.6.1
Low	GHSA-x746-7m8f-x49c	starlette@1.0.0	1.1.0
Low	GHSA-3496-9g83-7v6x	sqlparse@0.5.5	0.6.0
Low	GO-2025-3373	stdlib@go1.23.3	1.22.11
Low	ALPINE-CVE-2026-42768	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2025-4155	stdlib@go1.23.3	1.24.11
Low	GO-2025-4008	stdlib@go1.23.3	1.24.8
Low	GO-2025-4010	stdlib@go1.23.3	1.24.8
Low	PYSEC-2026-248	starlette@1.0.0	1.3.0
Low	GHSA-crqm-m339-7m2p	pyzipper@0.3.6	0.4.0
Low	GHSA-4xgf-cpjx-pc3j	pydantic-settings@2.14.1	2.14.2
Low	ALPINE-CVE-2026-40612	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-44777	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-4014	stdlib@go1.23.3	1.24.8
Low	ALPINE-CVE-2026-41256	jq@1.8.1-r0	1.8.2-r0
Low	ALPINE-CVE-2026-43894	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-3503	stdlib@go1.23.3	1.23.7
Low	ALPINE-CVE-2026-43896	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-4976	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-47770	jq@1.8.1-r0	1.8.2-r0
Low	GO-2026-5856	stdlib@go1.23.3	1.25.12
Low	GHSA-wphv-vfrh-23q5	joserfc@1.6.5	1.6.7
Low	GO-2025-4007	stdlib@go1.23.3	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.47.0	0.56.0
Low	GO-2026-4980	stdlib@go1.23.3	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.6-r0	3.5.7-r0
Low	GO-2026-5039	stdlib@go1.23.3	1.25.11
Low	ALPINE-CVE-2026-41257	jq@1.8.1-r0	1.8.2-r0
Low	GO-2025-3849	stdlib@go1.23.3	1.23.12
Low	GO-2025-4013	stdlib@go1.23.3	1.24.8
Low	GO-2026-4946	stdlib@go1.23.3	1.25.9
Low	GHSA-gj48-438w-jh9v	bleach@6.3.0	6.4.0
Low	ALPINE-CVE-2026-56131	expat@2.7.5-r0	2.8.2-r0
Low	GO-2026-4603	stdlib@go1.23.3	1.25.8
Low	GO-2026-6303	golang.org/x/crypto@v0.47.0	0.55.0
Low	GHSA-jp4c-xjxw-mgf9	pip@25.3	26.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
2026.5.1latest	yesterday	2026.5.1	0129281	3,013
2026.4.4	3 days ago	2026.4.4	—	—

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/loeken-at-home/home-assistant.svg)](https://charts.stackradar.io/charts/loeken-at-home/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.