StackRadar

home-assistant Helm chart

pascaliskeVerified publisher

Scored 14 Sept 2026

A Helm chart for home-assistant

Latest 0.1.1 8 months agoapp version 2025.12.5 0Artifact Hub

home-assistant 0.1.1 deploys 1 container image: ghcr.io/home-assistant/home-assistant. Across them, 433 findings — 2 critical, 3 high — 3 on CISA KEV. The highest contribution is GHSA-7488-6r32-c95q in litellm 1.80.5, fixed in 1.84.0.

Radar Score

4,7492359368

433 findings over 1 of 1 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
ghcr.io/home-assistant/home-assistant2025.12.523593684,749

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

433 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGHSA-jm66-cg57-jjv5azure-core@1.37.01.38.0
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.26.00.35.0
MediumALPINE-CVE-2026-55199libssh2@1.11.1-r01.11.1-r2
MediumALPINE-CVE-2026-66046expat@2.7.3-r02.8.4-r0
MediumGHSA-c6mh-fpjc-4pr3yt-dlp@2025.12.82026.6.9
MediumGHSA-7gcm-g887-7qv7protobuf@6.32.06.33.5
MediumALPINE-CVE-2026-28388openssl@3.5.4-r03.5.6-r0
MediumALPINE-CVE-2025-69421openssl@3.5.4-r03.5.5-r0
MediumALPINE-CVE-2026-28387openssl@3.5.4-r03.5.6-r0
MediumGHSA-58pv-8j8x-9vj2jaraco-context@5.3.06.1.0
MediumGHSA-63hf-3vf5-4wqfaiohttp@3.13.23.13.4
MediumALPINE-CVE-2026-28389openssl@3.5.4-r03.5.6-r0
MediumALPINE-CVE-2026-28390openssl@3.5.4-r03.5.6-r0
MediumGHSA-jr27-m4p2-rc6rpyasn1@0.6.10.6.3
LowALPINE-CVE-2025-69420openssl@3.5.4-r03.5.5-r0
LowPYSEC-2026-2132click@8.1.88.3.3
LowALPINE-CVE-2026-27135nghttp2@1.65.0-r01.68.1
LowGHSA-63vm-454h-vhhqpyasn1@0.6.10.6.2
LowALPINE-CVE-2026-33636libpng@1.6.47-r01.6.56-r0
LowGHSA-89gr-r52h-f8rxgolang.org/x/crypto@v0.26.00.52.0
LowGHSA-pp6c-gr5w-3c5gpython-multipart@0.0.210.0.27
LowGHSA-jppx-rxg9-jmrxgolang.org/x/crypto@v0.26.00.52.0
LowGHSA-j37q-q7p9-vpwmlitellm@1.80.5no fix listed
LowALPINE-CVE-2026-14456openssl@3.5.4-r03.5.8-r0
LowALPINE-CVE-2026-9076openssl@3.5.4-r03.5.7-r0
LowGHSA-62p4-gmf7-7g93pillow@12.0.012.3.0
LowGHSA-54jj-px8x-5w5qdeepdiff@8.6.18.6.2
LowALPINE-CVE-2026-3104bind@9.20.16-r09.20.21-r0
LowPYSEC-2026-2098aiohttp@3.13.23.13.4
LowGHSA-mf9v-mfxr-j63jurllib3@2.6.22.7.0
LowGHSA-p998-jp59-783maiohttp@3.13.23.13.4
LowALPINE-CVE-2026-5947bind@9.20.16-r09.20.23-r0
LowGHSA-whj4-6x5x-4v2jpillow@12.0.012.2.0
LowPYSEC-2026-3452pillow@12.0.012.3.0
LowALPINE-CVE-2026-32316jq@1.8.1-r01.8.2-r0
LowALPINE-CVE-2026-6732libxml2@2.13.9-r02.13.9-r1
LowGHSA-vx4q-3cr2-7cg2yt-dlp@2025.12.82026.6.9
LowGHSA-6jhg-hg63-jvvfaiohttp@3.13.23.13.3
LowGHSA-2wxc-x7rj-hg8fasyncssh@2.21.02.23.1
LowGHSA-g3cq-j2xw-wf74aiohttp@3.13.23.14.1
LowGHSA-g84x-mcqj-x9qqaiohttp@3.13.23.13.3
LowGHSA-vjc4-5qp5-m44jpillow@12.0.012.3.0
LowALPINE-CVE-2026-63072openssl@3.5.4-r03.5.8-r0
LowGHSA-jj3x-wxrx-4x23aiohttp@3.13.23.13.3
LowALPINE-CVE-2026-45445openssl@3.5.4-r03.5.7-r0
LowGHSA-xj96-63gp-2gmrpillow@12.0.012.3.0
LowGHSA-6mq8-rvhq-8wggaiohttp@3.13.23.13.3
LowGHSA-cfh3-3jmp-rvhcpillow@12.0.012.1.1
LowGHSA-xqmj-j6mv-4862litellm@1.80.51.83.7
LowALPINE-CVE-2026-76641expat@2.7.3-r02.8.4-r0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.1latest8 months ago2025.12.523593684,749

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/pascaliske/home-assistant.svg)](https://charts.stackradar.io/charts/pascaliske/home-assistant)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 6 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.