dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-64419	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64428	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-31462	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31560	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-31592	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43010	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-43311	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-43331	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-52944	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53027	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53102	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53140	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53142	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53144	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53154	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53190	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53210	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53214	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53220	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53237	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53251	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64052	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64064	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64070	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64358	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64404	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98051	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98054	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98082	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-110924	openssh@1:9.6p1-3ubuntu13.18	no fix listed
Low	DEBIAN-CVE-2025-30258	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	UBUNTU-CVE-2025-71313	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-23472	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43022	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43416	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53113	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53274	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53285	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63999	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64022	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64079	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98131	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98134	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-61143	tiff@4.7.0-3+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-52930	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53269	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53336	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53339	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53345	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53347	linux@6.8.0-137.137	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.