ghcr.io/home-assistant/home-assistant:stable (alpine 3.22.1) - Trivy Report - 2025-10-14 15:18:52.397616287 +0000 UTC m=+74.276210396

alpine
Package Vulnerability ID Severity Installed Version Fixed Version Links
curl CVE-2025-10148 MEDIUM 8.14.1-r1 8.14.1-r2
curl CVE-2025-9086 MEDIUM 8.14.1-r1 8.14.1-r2
libcrypto3 CVE-2025-9230 MEDIUM 3.5.2-r0 3.5.4-r0
libcrypto3 CVE-2025-9231 MEDIUM 3.5.2-r0 3.5.4-r0
libcrypto3 CVE-2025-9232 LOW 3.5.2-r0 3.5.4-r0
libcurl CVE-2025-10148 MEDIUM 8.14.1-r1 8.14.1-r2
libcurl CVE-2025-9086 MEDIUM 8.14.1-r1 8.14.1-r2
libexpat CVE-2025-59375 MEDIUM 2.7.1-r0 2.7.2-r0
libssl3 CVE-2025-9230 MEDIUM 3.5.2-r0 3.5.4-r0
libssl3 CVE-2025-9231 MEDIUM 3.5.2-r0 3.5.4-r0
libssl3 CVE-2025-9232 LOW 3.5.2-r0 3.5.4-r0
libxml2 CVE-2025-49794 CRITICAL 2.13.8-r0 2.13.9-r0
libxml2 CVE-2025-49796 CRITICAL 2.13.8-r0 2.13.9-r0
libxml2 CVE-2025-49795 HIGH 2.13.8-r0 2.13.9-r0
libxml2 CVE-2025-6021 HIGH 2.13.8-r0 2.13.9-r0
libxml2 CVE-2025-6170 LOW 2.13.8-r0 2.13.9-r0
No Misconfigurations found
python-pkg
Package Vulnerability ID Severity Installed Version Fixed Version Links
Js2Py CVE-2024-28397 HIGH 0.74
ecdsa CVE-2024-23342 HIGH 0.19.1
pip CVE-2025-8869 MEDIUM 25.2
No Misconfigurations found
gobinary
Package Vulnerability ID Severity Installed Version Fixed Version Links
golang.org/x/crypto CVE-2024-45337 CRITICAL v0.26.0 0.31.0
golang.org/x/crypto CVE-2025-22869 HIGH v0.26.0 0.35.0
stdlib CVE-2025-47907 HIGH v1.23.3 1.23.12, 1.24.6
stdlib CVE-2024-45336 MEDIUM v1.23.3 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2024-45341 MEDIUM v1.23.3 1.22.11, 1.23.5, 1.24.0-rc.2
stdlib CVE-2025-0913 MEDIUM v1.23.3 1.23.10, 1.24.4
stdlib CVE-2025-22866 MEDIUM v1.23.3 1.22.12, 1.23.6, 1.24.0-rc.3
stdlib CVE-2025-22871 MEDIUM v1.23.3 1.23.8, 1.24.2
stdlib CVE-2025-4673 MEDIUM v1.23.3 1.23.10, 1.24.4
stdlib CVE-2025-47906 MEDIUM v1.23.3 1.23.12, 1.24.6
No Misconfigurations found