dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74717	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80527	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80987	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89477	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89684	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89699	linux@6.8.0-137.137	no fix listed
Low	BIT-postgis-2026-73515	Postgis@3.3.3	3.7.0
Low	GO-2023-2041	stdlib@go1.19.9	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.55.0	0.56.0
Low	UBUNTU-CVE-2026-90380	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-34876	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2018-12930	linux@6.8.0-137.137	no fix listed
Low	GO-2025-3751	stdlib@go1.19.9	1.23.10
Low	UBUNTU-CVE-2026-66039	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm11
Low	UBUNTU-CVE-2026-34872	mbedtls@2.28.8-1	no fix listed
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u14	no fix listed
Low	GHSA-8qq5-rm4j-mr97	tar@7.4.3	7.5.3
Low	UBUNTU-CVE-2026-98096	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-56210	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	GO-2023-2043	stdlib@go1.19.9	1.20.8
Low	UBUNTU-CVE-2026-53183	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53184	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64430	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74621	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74696	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93830	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97417	linux@6.8.0-137.137	no fix listed
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.2	4.0.4
Low	GHSA-px8p-9vwx-vf98	fflate@0.7.4	0.7.5
Low	UBUNTU-CVE-2026-34874	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-52956	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-52960	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-57585	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-72202	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74374	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80631	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90234	linux@6.8.0-137.137	no fix listed
Low	GO-2026-4342	stdlib@go1.19.9	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@7.88.1-10+deb12u15	no fix listed
Low	GHSA-73rr-hh4g-fpgx	diff@5.2.0	5.2.2
Low	UBUNTU-CVE-2026-63893	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-87933	cjson@1.7.17-1	no fix listed
Low	GO-2023-1840	stdlib@go1.19.9	1.19.10
Low	ALPINE-CVE-2026-85091	zlib@1.3.1-r2	1.3.2-r1
Low	DEBIAN-CVE-2026-85091	zlib@1:1.2.13.dfsg-1	no fix listed
Low	UBUNTU-CVE-2023-49528	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm1
Low	UBUNTU-CVE-2018-12931	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-45186	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	UBUNTU-CVE-2026-64210	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74550	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.