dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-40003	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40146	linux@6.8.0-137.137	no fix listed
Low	USN-8902-1	libarchive@3.7.2-2ubuntu0.8	3.7.2-2ubuntu0.9
Low	GO-2026-4602	stdlib@go1.24.13	1.25.8
Low	UBUNTU-CVE-2026-72106	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80627	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80647	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80652	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80679	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80689	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80708	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40340	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40338	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68207	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72062	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72075	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72179	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72384	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80660	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-68781	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68286	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68203	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72028	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72147	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72324	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72336	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80624	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80629	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80636	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80650	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80654	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80676	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68303	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72337	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72341	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80623	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80643	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80698	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-18503	python3.11@3.11.2-6+deb12u8	3.11.2-6+deb12u9
Low	UBUNTU-CVE-2026-18503	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2025-68296	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-68396	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2023-54190	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40097	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68188	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40136	linux@6.8.0-137.137	no fix listed
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0	1.45.0
Low	GHSA-8wmf-6v46-5gfg	go.opentelemetry.io/otel/sdk@v1.44.0	1.45.0
Low	DEBIAN-CVE-2025-8534	tiff@4.7.0-3+deb13u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.