dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-72469	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80935	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80937	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72254	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89657	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89707	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-43101	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72203	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74385	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89648	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90149	linux@6.8.0-137.137	no fix listed
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.5	9.0.7
Low	UBUNTU-CVE-2026-43172	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74407	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74534	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74538	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80721	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90367	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90379	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64448	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98056	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90153	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98070	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-107378	cairo@1.18.0-3build1	no fix listed
Low	BIT-postgresql-2026-6637	postgresql@15.3.0-3	14.23.0
Low	BIT-postgresql-2026-6637	PostgreSQL@15.3.0	14.23.0
Low	UBUNTU-CVE-2026-98239	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2026-6479	postgresql@15.3.0-3	14.23.0
Low	BIT-postgresql-2026-6479	PostgreSQL@15.3.0	14.23.0
Low	UBUNTU-CVE-2025-40158	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89544	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2021-31879	wget@1.25.0-2	no fix listed
Low	UBUNTU-CVE-2026-53390	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64389	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-2177	zvbi@0.2.42-2	0.2.42-2ubuntu0.24.04.1~esm1
Low	DLA-3907-1	sqlite3@3.34.1-3	3.34.1-3+deb11u1
Low	GO-2026-5037	stdlib@go1.24.13	1.25.11
Low	UBUNTU-CVE-2026-89632	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-60002	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2018-1121	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-69534	python3.11@3.11.2-6+deb12u8	3.11.2-6+deb12u9
Low	UBUNTU-CVE-2026-64398	linux@6.8.0-137.137	6.8.0-147.147
Low	GHSA-p4rw-rvv2-7xwr	nltk@3.10.0	3.10.3
Low	GHSA-23hp-3jrh-7fpw	tar@7.4.3	7.5.19
Low	UBUNTU-CVE-2026-3833	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2026-64380	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74704	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89711	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53217	linux@6.8.0-137.137	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.