homeassistant/home-assistant:2023.12.4 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of homeassistant/home-assistant
homeassistant/home-assistant:2023.12.4 resolved to 8d000332b09b, scanned 14 Sept 2026: 460 findings, 4 critical; deployed by 1 chart, among them homeassistant.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Medium findings
Medium: findings whose contribution to the Radar Score is 15–39. Show every band
Findings for digest 8d000332b09b as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-pwr2-4v36-6qpr | orjson | 3.9.15 |
| Medium | GHSA-x527-x647-q7gg | golang.org/ | 0.52.0 |
| Medium | GHSA-375g-39jq-vq7m | cbor2 | 5.6.2 |
| Medium | ALPINE-CVE-2025-0725 | curl | 8.12.0-r0 |
| Medium | ALPINE-CVE-2024-32465 | git | 2.40.3-r0 |
| Medium | ALPINE-CVE-2023-7104 | sqlite | 3.41.2-r3 |
| Medium | GHSA-2xpw-w6gg-jr37 | urllib3 | 2.6.0 |
| Medium | GHSA-gm62-xv2j-4w53 | urllib3 | 2.6.0 |
| Medium | ALPINE-CVE-2023-6237 | openssl | 3.1.4-r4 |
| Medium | ALPINE-CVE-2024-23775 | mbedtls | 2.28.7-r0 |
| Medium | GHSA-3ww4-gg4f-jr7f | cryptography | 42.0.0 |
| Medium | GHSA-gwc9-m7rh-j2ww | golang.org/ | 0.0.0-20211202192323-5770296d904e |
| Medium | GHSA-vgwf-h737-ff37 | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2024-28960 | mbedtls | 2.28.8-r0 |
| Medium | ALPINE-CVE-2023-6516 | bind | 9.18.24-r0 |
| Medium | GHSA-5hxg-r395-fqxx | homeassistant | 2026.6.0 |
| Medium | ALPINE-CVE-2024-9143 | openssl | 3.1.7-r1 |
| Medium | ALPINE-CVE-2023-46218 | curl | 8.5.0-r0 |
| Medium | GHSA-q34m-jh98-gwm2 | werkzeug | 3.0.6 |
| Medium | GHSA-5m98-qgg9-wh84 | aiohttp | 3.9.4 |
| Medium | GHSA-f5wc-c3c7-36mc | golang.org/ | 0.52.0 |
| Medium | ALPINE-CVE-2025-0665 | curl | 8.12.0-r0 |
| Medium | PYSEC-2024-230 | certifi | 2024.7.4 |
| Medium | GHSA-8w49-h785-mj3c | tornado | 6.4.2 |
| Medium | GHSA-vqfr-h8mv-ghfj | h11 | 0.16.0 |
| Medium | ALPINE-CVE-2025-31115 | xz | 5.4.3-r1 |
| Medium | ALPINE-CVE-2024-2379 | curl | 8.7.1-r0 |
| Medium | GHSA-wvwj-cvrp-7pv5 | authlib | 1.6.9 |
| Medium | ALPINE-CVE-2023-50472 | cjson | 1.7.17-r0 |
| Medium | GHSA-wj6h-64fc-37mp | ecdsa | no fix listed |
| Medium | GHSA-hx9q-6w63-j58v | orjson | 3.11.6 |
| Medium | GHSA-rm3j-f69w-wqmq | golang.org/ | 0.52.0 |
| Medium | GHSA-jm66-cg57-jjv5 | azure-core | 1.38.0 |
| Medium | GHSA-hcg3-q754-cr77 | golang.org/ | 0.35.0 |
| Medium | GHSA-3rq5-2g8h-59hc | dnspython | 2.6.1 |
| Medium | GHSA-c6mh-fpjc-4pr3 | yt-dlp | 2026.6.9 |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | ALPINE-CVE-2024-32021 | git | 2.40.3-r0 |
| Medium | GO-2022-1144 | stdlib | 1.18.9 |
| Medium | GHSA-pwhh-q4h6-w599 | spotipy | 2.25.1 |
| Medium | GHSA-6vqw-3v5j-54x4 | cryptography | 42.0.4 |
| Medium | GHSA-63hf-3vf5-4wqf | aiohttp | 3.13.4 |
| Medium | PYSEC-2026-2191 | kafka-python | 2.3.2 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
Used by
| Chart | Version | Tag | Containers |
|---|---|---|---|
| homeassistantvolker-raschekVerified publisher | 0.2.3 | 2023.12.4 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.