dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74572	linux@6.8.0-137.137	no fix listed
Low	GHSA-9hjg-9r4m-mvj7	requests@2.32.3	2.32.4
Low	UBUNTU-CVE-2025-5222	icu@74.2-1ubuntu3.1	no fix listed
Low	UBUNTU-CVE-2026-53254	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64540	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64547	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68373	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74651	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89524	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90017	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72329	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80693	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-25702	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-88373	libde265@1.0.15-1+deb13u2	no fix listed
Low	UBUNTU-CVE-2026-74356	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-63387	libevent@2.1.12-stable-8	2.1.12-stable-8+deb12u1
Low	UBUNTU-CVE-2026-90016	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53147	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-89583	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64833	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-68121	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64440	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-40210	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97953	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64406	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2025-70873	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-33065	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-58471	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-58472	wget@1.25.0-2	no fix listed
Low	ALPINE-CVE-2026-2673	openssl@3.5.5-r0	3.5.6-r0
Low	UBUNTU-CVE-2026-53357	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-74557	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80707	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80717	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-75146	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-65703	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-16554	cjson@1.7.17-1	no fix listed
Low	UBUNTU-CVE-2026-58013	glib2.0@2.80.0-6ubuntu3.8	2.80.0-6ubuntu3.9
Low	UBUNTU-CVE-2023-6605	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm6
Low	DEBIAN-CVE-2026-4437	glibc@2.41-12+deb13u2	2.41-12+deb13u3
Low	UBUNTU-CVE-2026-43213	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98173	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98175	linux@6.8.0-137.137	no fix listed
Low	GO-2024-2598	stdlib@go1.19.9	1.21.8
Low	UBUNTU-CVE-2026-42015	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	DEBIAN-CVE-2025-8177	tiff@4.7.0-3+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-72440	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-19499	glibc@2.36-9+deb12u14	no fix listed
Low	UBUNTU-CVE-2026-90049	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-58010	glib2.0@2.80.0-6ubuntu3.8	2.80.0-6ubuntu3.9

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.