dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-53168	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53177	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53181	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53208	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53236	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53245	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53343	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64006	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64205	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-110927	openssh@1:9.6p1-3ubuntu13.18	no fix listed
Low	UBUNTU-CVE-2026-43127	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46014	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53103	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	UBUNTU-CVE-2025-40355	linux@6.8.0-137.137	no fix listed
Low	USN-8899-1	libpng1.6@1.6.43-5ubuntu0.6	1.6.43-5ubuntu0.7
Low	BIT-redis-2023-45145	redis@7.0.11-1	6.2.14
Low	UBUNTU-CVE-2026-23247	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43240	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-52913	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-52916	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-53135	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53139	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53158	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53163	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53213	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53238	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53337	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63991	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64012	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64131	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64135	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64155	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64214	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64220	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64231	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64316	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64321	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64331	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64332	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64335	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64336	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64338	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64345	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64350	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64359	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64360	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64376	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64409	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64417	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.