dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-68230	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68324	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40065	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68376	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68093	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-68209	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68338	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68280	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68288	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-73283	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-68150	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68211	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68236	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68084	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68102	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63826	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68105	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68233	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68238	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68291	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80704	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-2	4.9-2+deb13u1
Low	UBUNTU-CVE-2026-107886	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2026-80711	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68436	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68448	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68086	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u14	no fix listed
Low	GHSA-pjjw-68hj-v9mw	uv@0.8.9	0.11.6
Low	UBUNTU-CVE-2026-68441	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-107928	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-107929	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-86409	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-86410	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-86414	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-87862	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87863	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-87864	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-87865	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-87866	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-92386	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92387	curl@8.14.1-2+deb13u7	no fix listed
Low	DEBIAN-CVE-2026-92388	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-92389	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-92390	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-92391	curl@7.88.1-10+deb12u15	no fix listed
Low	DEBIAN-CVE-2026-94266	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-w476-p2h3-79g9	uv@0.8.9	0.9.5
None	DEBIAN-CVE-2026-3479	python3.11@3.11.2-6+deb12u8	no fix listed
None	UBUNTU-CVE-2023-54105	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.