dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-63909	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-89631	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68083	linux@6.8.0-137.137	6.8.0-147.147
Low	GO-2026-4986	stdlib@go1.24.13	1.25.10
Low	UBUNTU-CVE-2026-89973	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89554	linux@6.8.0-137.137	no fix listed
Low	GO-2026-4918	golang.org/x/net@v0.47.0	0.53.0
Low	GO-2026-4918	stdlib@go1.24.13	1.25.10
Low	ALPINE-CVE-2026-42764	openssl@3.5.5-r0	3.5.7-r0
Low	ALPINE-CVE-2026-63075	openssl@3.5.5-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-42764	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2026-63075	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2
Low	UBUNTU-CVE-2026-63796	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-72021	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72035	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-58469	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-64025	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-72057	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-10263	linux@6.8.0-137.137	6.8.0-142.142
Low	UBUNTU-CVE-2026-64400	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-63383	libevent@2.1.12-stable-8	2.1.12-stable-8+deb12u1
Low	UBUNTU-CVE-2026-64394	linux@6.8.0-137.137	6.8.0-147.147
Low	GO-2024-2599	stdlib@go1.19.9	1.21.8
Low	GHSA-vfj7-8cjw-p6xm	braces@3.0.3	no fix listed
Low	UBUNTU-CVE-2026-64390	linux@6.8.0-137.137	6.8.0-147.147
Low	BIT-postgresql-2026-15741	postgresql@15.3.0-3	14.24.0
Low	BIT-postgresql-2026-15741	PostgreSQL@15.3.0	14.24.0
Low	UBUNTU-CVE-2026-89696	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-34873	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-97573	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-58049	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-77214	expat@2.5.0-1+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-56211	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	BIT-postgresql-2026-14662	PostgreSQL@15.3.0	14.24.0
Low	BIT-postgresql-2026-14662	postgresql@15.3.0-3	14.24.0
Low	GHSA-qx2g-xrx7-vfh8	nltk@3.10.0	3.10.1
Low	UBUNTU-CVE-2021-3714	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-42013	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-63976	linux@6.8.0-137.137	6.8.0-146.146
Low	PYSEC-2023-235	couchbase@4.6.2	no fix listed
Low	UBUNTU-CVE-2026-74490	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89663	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64560	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2020-26142	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63830	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-43464	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98130	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2026-6478	postgresql@15.3.0-3	14.23.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.