dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-52934	linux@6.8.0-137.137	6.8.0-146.146
Low	GHSA-rfgv-xxqx-mfg5	undici@6.27.0	6.28.1
Low	GO-2026-6607	stdlib@go1.26.7	1.26.9
Low	DEBIAN-CVE-2026-95619	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-95619	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-95619	gcc-defaults@4:13.2.0-7ubuntu1	no fix listed
Low	UBUNTU-CVE-2025-9951	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm6
Low	UBUNTU-CVE-2026-31771	linux@6.8.0-137.137	no fix listed
Low	DLA-4061-1	libtasn1-6@4.16.0-2+deb11u1	4.16.0-2+deb11u2
Low	GHSA-xrqw-3rrv-vx5w	transformers@5.5.0	5.10.0
Low	UBUNTU-CVE-2026-88372	libsndfile@1.2.2-1ubuntu5.24.04.1	no fix listed
Low	UBUNTU-CVE-2026-64557	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74535	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93790	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93799	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97409	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-8286	curl@7.88.1-10+deb12u15	no fix listed
Low	UBUNTU-CVE-2026-81003	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2021-26934	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-52922	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-93282	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64374	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2024-31582	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm1
Low	UBUNTU-CVE-2026-68409	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74537	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80722	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93793	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97509	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74575	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-63757	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7
Low	BIT-postgresql-2026-14679	postgresql@15.3.0-3	14.24.0
Low	BIT-postgresql-2026-14679	PostgreSQL@15.3.0	14.24.0
Low	UBUNTU-CVE-2023-39329	openjpeg2@2.5.0-2ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2026-72115	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2023-37769	pixman@0.42.2-1build1	no fix listed
Low	GO-2025-4013	stdlib@go1.19.9	1.24.8
Low	UBUNTU-CVE-2024-36616	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Low	DEBIAN-CVE-2026-6791	glibc@2.36-9+deb12u14	no fix listed
Low	GO-2026-6609	stdlib@go1.26.7	1.26.9
Low	DEBIAN-CVE-2026-88647	gnutls28@3.7.9-2+deb12u7	no fix listed
Low	UBUNTU-CVE-2026-64117	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-58015	glib2.0@2.80.0-6ubuntu3.8	2.80.0-6ubuntu3.9
Low	UBUNTU-CVE-2025-68304	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2022-4543	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-66863	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2025-66865	binutils@2.42-4ubuntu2.10	no fix listed
Low	DEBIAN-CVE-2022-27943	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-17084	python3.11@3.11.2-6+deb12u8	3.11.2-6+deb12u9
Low	UBUNTU-CVE-2026-17084	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	DEBIAN-CVE-2026-58051	libssh2@1.10.0-3+b1	1.10.0-3+deb12u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.