ghcr.io/home-operations/home-assistant:2026.3.1 container image
GitHub Container RegistryScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.GitHub Container Registry all tags of ghcr.io/home-operations/home-assistant
ghcr.io/home-operations/home-assistant:2026.3.1 resolved to 067e54e2e107, scanned 14 Sept 2026: 441 findings, 0 critical, 1 on KEV; deployed by 1 chart, among them home-assistant.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
441 distinct on this digest
Findings for digest 067e54e2e107 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | ALPINE-CVE-2026-1965 | curl | 8.19.0-r0 |
| Low | GHSA-9f5j-8jwj-x28g | ecdsa | 0.19.2 |
| Low | ALPINE-CVE-2026-4878 | libcap | 2.78-r0 |
| Low | ALPINE-CVE-2026-0799 | libpcap | 1.10.7-r0 |
| Low | ALPINE-CVE-2026-7168 | curl | 8.20.0-r0 |
| Low | PYSEC-2026-2104 | aiohttp | 3.14.0 |
| Low | GHSA-qc2x-6f54-m6h9 | zeroconf | 0.149.16 |
| Low | ALPINE-CVE-2026-3783 | curl | 8.19.0-r0 |
| Low | ALPINE-CVE-2026-4873 | curl | 8.20.0-r0 |
| Low | ALPINE-CVE-2026-34743 | xz | 5.8.3-r0 |
| Low | GHSA-6hr6-w5qg-qmwg | h2 | 4.4.1 |
| Low | GHSA-9m57-25v3-79x9 | golang.org/ | 0.52.0 |
| Low | GHSA-65pc-fj4g-8rjx | idna | 3.15 |
| Low | ALPINE-CVE-2026-3592 | bind | 9.20.23-r0 |
| Low | GHSA-vp96-hxj8-p424 | pyopenssl | 26.0.0 |
| Low | ALPINE-CVE-2026-42769 | openssl | 3.5.7-r0 |
| Low | PYSEC-2025-183 | pyjwt | no fix listed |
| Low | ALPINE-CVE-2026-3591 | bind | 9.20.21-r0 |
| Low | GHSA-r95x-qfjj-fjj2 | authlib | 1.6.12 |
| Low | ALPINE-CVE-2026-78408 | util-linux | 2.41.6-r1 |
| Low | GHSA-34rh-wp3j-6cxc | github.com/ | 3.1.5 |
| Low | GHSA-w7vc-732c-9m39 | pyjwt | 2.13.0 |
| Low | ALPINE-CVE-2026-49839 | jq | 1.8.2-r0 |
| Low | GHSA-mj87-hwqh-73pj | python-multipart | 0.0.26 |
| Low | GO-2026-4981 | stdlib | 1.25.10 |
| Low | GO-2025-3563 | stdlib | 1.23.8 |
| Low | GO-2026-4977 | stdlib | 1.25.10 |
| Low | ALPINE-CVE-2026-76957 | expat | 2.8.4-r0 |
| Low | GO-2026-4986 | stdlib | 1.25.10 |
| Low | GHSA-966j-vmvw-g2g9 | aiohttp | 3.13.4 |
| Low | GO-2026-4918 | stdlib | 1.25.10 |
| Low | GO-2026-4918 | golang.org/ | 0.53.0 |
| Low | GO-2026-4337 | stdlib | 1.24.13 |
| Low | GHSA-qccp-gfcp-xxvc | urllib3 | 2.7.0 |
| Low | GO-2026-4601 | stdlib | 1.25.8 |
| Low | ALPINE-CVE-2026-56403 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56404 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56405 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56408 | expat | 2.8.2-r0 |
| Low | GHSA-6w46-j5rx-g56g | pytest | 9.0.3 |
| Low | ALPINE-CVE-2026-56406 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56407 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56410 | expat | 2.8.2-r0 |
| Low | ALPINE-CVE-2026-56411 | expat | 2.8.2-r0 |
| Low | GO-2026-5026 | golang.org/ | 0.55.0 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | ALPINE-CVE-2025-14104 | util-linux | 2.41.4-r0 |
| Low | GO-2025-3420 | stdlib | 1.22.11 |
| Low | GO-2026-4342 | stdlib | 1.24.12 |
| Low | GO-2025-3751 | stdlib | 1.23.10 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| home-assistantk8s-home-lab-repo | 16.3.1 | 2026.3.1 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.