dify 0.38.0 Helm chart

Name: dify Helm chart 0.38.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 15 Sept 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.38.0 20 days agoapp version 1.16.1 13Artifact Hub

dify 0.38.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 2,141 findings — 4 critical, 4 high — 2 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

22,115442801,851

2,141 findings over 10 of 11 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.16.1	0016140	1,495
langgenius/dify-api×4	1.16.1	0041324	3,712
langgenius/dify-agent-local-sandbox	1.16.1	0140240	2,956
langgenius/dify-plugin-daemon	0.6.3-local	0046478	4,781
library/nginx	latest	0030145	1,839
langgenius/dify-sandbox	0.2.15	0038225	2,620
langgenius/dify-web	1.16.1	001854	909
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	2130128	2,097
bitnamilegacy/redis×2	7.0.11-debian-11-r12	2217111	1,557
library/alpine	latest	0046	149
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

1,002 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-4976	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	GO-2026-5856	stdlib@go1.24.13	1.25.12
Low	UBUNTU-CVE-2026-47714	libheif@1.17.6-1ubuntu4.4	1.17.6-1ubuntu4.6
Low	GO-2025-4007	stdlib@go1.19.9	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.45.0	0.56.0
Low	UBUNTU-CVE-2026-62289	libheif@1.17.6-1ubuntu4.4	1.17.6-1ubuntu4.7
Low	GO-2026-4980	stdlib@go1.24.13	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42770	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GO-2026-5039	stdlib@go1.24.13	1.25.11
Low	DEBIAN-CVE-2026-63381	libevent@2.1.12-stable-8	no fix listed
Low	UBUNTU-CVE-2026-55653	openssh@1:9.6p1-3ubuntu13.16	no fix listed
Low	BIT-postgresql-2026-2003	postgresql@15.3.0-3	14.21.0
Low	BIT-postgresql-2026-2003	PostgreSQL@15.3.0	14.21.0
Low	UBUNTU-CVE-2026-75145	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DLA-4143-1	glibc@2.31-13+deb11u6	2.31-13+deb11u12
Low	GO-2025-4013	stdlib@go1.19.9	1.24.8
Low	GO-2025-3849	stdlib@go1.19.9	1.23.12
Low	GO-2026-4946	stdlib@go1.24.13	1.25.9
Low	UBUNTU-CVE-2023-50007	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm1
Low	DLA-4089-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u2
Low	DEBIAN-CVE-2021-4217	unzip@6.0-28	no fix listed
Low	DLA-4195-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u7
Low	DEBIAN-CVE-2026-12003	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-70631	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	DEBIAN-CVE-2026-55654	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-4367	libxpm@1:3.5.17-1build2	1:3.5.17-1ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-70629	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-70630	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2025-15649	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-v3r7-h72x-cjcm	undici@6.27.0	6.28.0
Low	GO-2026-4603	stdlib@go1.24.13	1.25.8
Low	DEBIAN-CVE-2026-0864	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-0864	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	DEBIAN-CVE-2010-4756	glibc@2.41-12+deb13u3	no fix listed
Low	GO-2026-6303	golang.org/x/crypto@v0.45.0	0.55.0
Low	BIT-redis-2023-45145	redis@7.0.11-1	6.2.14
Low	GHSA-jp4c-xjxw-mgf9	pip@25.0.1	26.1
Low	UBUNTU-CVE-2026-6357	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	DEBIAN-CVE-2026-48934	nodejs@22.21.0-1nodesource1	no fix listed
Low	DEBIAN-CVE-2025-6141	ncurses@6.5+20250216-2	no fix listed
Low	GO-2026-6354	golang.org/x/crypto@v0.45.0	0.56.0
Low	DEBIAN-CVE-2026-29111	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	GO-2026-4982	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	GO-2026-6091	stdlib@go1.26.5	1.25.13
Low	DEBIAN-CVE-2026-15059	systemd@257.13-1~deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.38.0latest	20 days ago	1.16.1	442801,851	22,115

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.