ghcr.io/home-operations/home-assistant:2026.3.1 container image

GitHub Container Registry

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/home-operations/home-assistant

ghcr.io/home-operations/home-assistant:2026.3.1 resolved to 067e54e2e107, scanned 14 Sept 2026: 441 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them home-assistant.

Radar Score

4,6340156383

441 findings on digest 067e54e2e107 · scanned 14 Sept 2026

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
2026.3.1resolves to	067e54e2e107	1 chart	8 days ago	0156383	4,634

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

441 distinct on this digest

Findings for digest 067e54e2e107 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	GHSA-86qp-5c8j-p5mrKEV	starlette@0.52.1	1.0.1
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.26.0	0.52.0
Medium	GHSA-h95x-26f3-88hr	js2py@0.74	no fix listed
Medium	ALPINE-CVE-2026-45447	openssl@3.5.5-r0	3.5.7-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.26.0	0.31.0
Medium	ALPINE-CVE-2026-55200	libssh2@1.11.1-r1	1.11.1-r3
Medium	ALPINE-CVE-2026-3593	bind@9.20.18-r0	9.20.23-r0
Medium	ALPINE-CVE-2021-27219	glib@2.86.3-r0	2.66.6-r0
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-5946	bind@9.20.18-r0	9.20.23-r0
Medium	ALPINE-CVE-2026-6473	postgresql18@18.2-r0	18.4-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-1519	bind@9.20.18-r0	9.20.21-r0
Medium	PYSEC-2026-2269	pyopenssl@25.3.0	26.0.0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.5-r0	3.5.8-r0
Medium	PYSEC-2026-36	cryptography@46.0.5	46.0.7
Medium	ALPINE-CVE-2026-63076	openssl@3.5.5-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-56123	socat@1.8.0.3-r1	1.8.1.2-r0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.26.0	0.52.0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.5-r0	3.5.7-r0
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.26.0	0.52.0
Medium	GHSA-5hxg-r395-fqxx	homeassistant@2026.3.1	2026.6.0
Medium	ALPINE-CVE-2026-14669	postgresql18@18.2-r0	18.5-r0
Medium	ALPINE-CVE-2026-34182	openssl@3.5.5-r0	3.5.7-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.26.0	0.52.0
Medium	ALPINE-CVE-2026-33416	libpng@1.6.55-r0	1.6.56-r0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-3039	bind@9.20.18-r0	9.20.23-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.5-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.5-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.5-r0	3.5.8-r0
Medium	GHSA-wj6h-64fc-37mp	ecdsa@0.19.1	no fix listed
Medium	GHSA-hx9q-6w63-j58v	orjson@3.11.5	3.11.6
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.26.0	0.52.0
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.26.0	0.35.0
Medium	ALPINE-CVE-2026-55199	libssh2@1.11.1-r1	1.11.1-r3
Medium	ALPINE-CVE-2026-66046	expat@2.7.4-r0	2.8.4-r0
Medium	GHSA-c6mh-fpjc-4pr3	yt-dlp@2026.2.21	2026.6.9
Medium	GHSA-7gcm-g887-7qv7	protobuf@6.32.0	6.33.5
Medium	ALPINE-CVE-2026-80229	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-8927	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-28388	openssl@3.5.5-r0	3.5.6-r0

Used by

1 chart

Chart	Version	Tag	Containers
home-assistantk8s-home-lab-repo	16.3.1	2026.3.1	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.