dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-72235	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89569	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90329	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98261	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.10.1-3+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-80989	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2017-13716	binutils@2.42-4ubuntu2.10	no fix listed
Low	GHSA-82r6-8w77-94w6	anyio@4.14.1	4.14.2
Low	UBUNTU-CVE-2026-90255	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90357	linux@6.8.0-137.137	no fix listed
Low	GO-2026-6218	stdlib@go1.26.5	1.25.13
Low	UBUNTU-CVE-2026-68470	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72380	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74530	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74533	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80692	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90256	linux@6.8.0-137.137	no fix listed
Low	GO-2026-5942	stdlib@go1.26.5	1.26.6
Low	GO-2026-5942	golang.org/x/net@v0.55.0	0.56.0
Low	UBUNTU-CVE-2026-68100	linux@6.8.0-137.137	6.8.0-147.147
Low	GHSA-qv6h-rv94-w285	pypdf@6.15.0	6.17.0
Low	UBUNTU-CVE-2026-89844	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-56209	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	UBUNTU-CVE-2026-58016	glib2.0@2.80.0-6ubuntu3.8	2.80.0-6ubuntu3.9
Low	UBUNTU-CVE-2026-63946	linux@6.8.0-137.137	6.8.0-146.146
Low	ALPINE-CVE-2026-31789	openssl@3.5.5-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-64832	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	GHSA-5jq2-8x83-x246	pypdf@6.15.0	6.18.0
Low	GHSA-fp3h-c4fm-7vvf	pypdf@6.15.0	6.18.1
Low	GHSA-g9cg-prrw-2r8q	pypdf@6.15.0	6.18.1
Low	GHSA-jw7q-gvrg-4vj3	pypdf@6.15.0	6.18.1
Low	GHSA-php9-fj8v-98fj	pypdf@6.15.0	6.19.0
Low	GHSA-v247-6f48-mgcj	pypdf@6.15.0	6.19.0
Low	GHSA-w23x-9jrw-r45c	pypdf@6.15.0	6.19.0
Low	UBUNTU-CVE-2026-63944	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-89860	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68096	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72148	linux@6.8.0-137.137	6.8.0-147.147
Low	GHSA-r292-9mhp-454m	tar@7.4.3	7.5.21
Low	UBUNTU-CVE-2026-98257	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40168	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53392	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53397	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74340	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74410	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80599	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-25833	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-89704	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89706	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64600	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.