dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-postgresql-2026-16241	PostgreSQL@15.3.0	14.24.0
Low	DEBIAN-CVE-2023-4016	procps@2:4.0.2-3	no fix listed
Low	DEBIAN-CVE-2022-3219	gnupg2@2.2.40-1.1+deb12u2	no fix listed
Low	UBUNTU-CVE-2025-59692	linux@6.8.0-137.137	no fix listed
Low	BIT-redis-2023-41053	redis@7.0.11-1	7.0.13
Low	UBUNTU-CVE-2026-43053	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53352	linux@6.8.0-137.137	6.8.0-146.146
Low	DEBIAN-CVE-2026-106586	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-96674	alsa-lib@1.2.11-1ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-107678	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-41080	expat@2.5.0-1+deb12u2	no fix listed
Low	BIT-postgresql-2026-14673	PostgreSQL@15.3.0	14.24.0
Low	BIT-postgresql-2026-14673	postgresql@15.3.0-3	14.24.0
Low	UBUNTU-CVE-2020-35501	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-23469	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64373	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98109	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-106582	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-102474	dash@0.5.12-2	no fix listed
Low	UBUNTU-CVE-2026-23348	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64038	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-87876	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2026-57177	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2025-11495	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2025-11731	libxslt@1.1.35-1.2+deb13u3	no fix listed
Low	UBUNTU-CVE-2023-48727	onevpl@2023.3.0-1build1	no fix listed
Low	UBUNTU-CVE-2024-39286	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-107655	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	DEBIAN-CVE-2007-5686	shadow@1:4.13+dfsg1-1+deb12u2	no fix listed
Low	BIT-postgresql-2025-12817	PostgreSQL@15.3.0	13.23.0
Low	BIT-postgresql-2025-12817	postgresql@15.3.0-3	13.23.0
Low	UBUNTU-CVE-2026-59846	libssh@0.10.6-2ubuntu0.4	0.10.6-2ubuntu0.5
Low	BIT-postgresql-2025-8713	PostgreSQL@15.3.0	13.22.0
Low	BIT-postgresql-2025-8713	postgresql@15.3.0-3	13.22.0
Low	DEBIAN-CVE-2026-18477	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-73281	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2024-56712	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-55453	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2023-53154	cjson@1.7.17-1	1.7.17-1ubuntu0.1~esm3
Low	DLA-3972-1	tzdata@2021a-1+deb11u10	2024b-0+deb11u1
Low	DLA-4085-1	tzdata@2021a-1+deb11u10	2025a-0+deb11u1
Low	DLA-4105-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u1
Low	DLA-4403-1	tzdata@2021a-1+deb11u10	2025b-0+deb11u2
Low	DLA-4485-1	ca-certificates@20210119	20230311+deb12u1~deb11u1
Low	GO-2026-5932	golang.org/x/crypto@v0.55.0	no fix listed
Low	RUSTSEC-2026-0173	proc-macro-error2@2.0.1	no fix listed
Low	RUSTSEC-2026-0186	memmap2@0.9.10	0.9.11
Low	RUSTSEC-2026-0204	crossbeam-epoch@0.9.18	0.9.20
Low	RUSTSEC-2026-0221	event-listener@5.4.1	5.4.2
Low	RUSTSEC-2026-0258	h2@0.4.15	0.4.16

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.