dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-64184	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64187	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64233	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64241	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64254	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98152	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98159	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98160	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98161	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2022-41848	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2011-4116	perl@5.36.0-7+deb12u3	no fix listed
Low	UBUNTU-CVE-2026-100074	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-71315	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-100076	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-100077	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-52937	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53258	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98162	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-40962	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm10
Low	GO-2025-3447	stdlib@go1.19.9	1.22.12
Low	UBUNTU-CVE-2025-1152	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2025-38311	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-1150	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-6845	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2025-1151	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2026-35191	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3
Low	GHSA-jwrc-g2q2-pq5p	pyjwt@2.13.0	2.14.0
Low	DEBIAN-CVE-2026-73282	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-35414	openssh@1:9.6p1-3ubuntu13.18	no fix listed
Low	GHSA-39w2-rjm5-chcv	next@16.3.2	16.3.8
Low	DEBIAN-CVE-2026-89092	glibc@2.36-9+deb12u14	no fix listed
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	DEBIAN-CVE-2013-0337	nginx@1.31.7-1~trixie	no fix listed
Low	GHSA-58qw-9mgm-455v	pip@25.0.1	26.1
Low	UBUNTU-CVE-2026-3219	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-88386	libsndfile@1.2.2-1ubuntu5.24.04.1	no fix listed
Low	BIT-postgresql-2026-6469	PostgreSQL@15.3.0	14.24.0
Low	BIT-postgresql-2026-6469	postgresql@15.3.0-3	14.24.0
Low	DEBIAN-CVE-2025-61145	tiff@4.7.0-3+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-64190	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80703	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2023-20585	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-1149	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2026-16742	systemd@252.39-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-94284	libx11@2:1.8.12-1	no fix listed
Low	UBUNTU-CVE-2020-11935	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2026-6474	postgresql@15.3.0-3	14.23.0
Low	BIT-postgresql-2026-6474	PostgreSQL@15.3.0	14.23.0
Low	DEBIAN-CVE-2026-18374	glibc@2.36-9+deb12u14	no fix listed
Low	UBUNTU-CVE-2025-39910	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.