dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2024-26458	krb5@1.20.1-2+deb12u5	no fix listed
Low	UBUNTU-CVE-2026-53281	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2024-23337	jq@1.6-2.1+deb12u2	no fix listed
Low	DEBIAN-CVE-2026-76956	expat@2.8.3-1~deb13u1	no fix listed
Low	BIT-gdal-2026-8087	GDAL@3.7.0	3.13.0
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63074	openssl@3.0.20-1~deb12u2	3.0.22-1~deb12u1
Low	UBUNTU-CVE-2025-36442	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63921	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-72061	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72111	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74380	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80547	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80548	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80552	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80553	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89957	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89959	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90286	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-95209	gnutls28@3.7.9-2+deb12u7	no fix listed
Low	UBUNTU-CVE-2026-97595	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74655	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89908	linux@6.8.0-137.137	no fix listed
Low	DSA-5726-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u5
Low	UBUNTU-CVE-2025-59734	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	GO-2025-3373	stdlib@go1.19.9	1.22.11
Low	DEBIAN-CVE-2025-8176	tiff@4.7.0-3+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-53178	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-19672	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	GHSA-xpv3-w29h-x7cv	oauthlib@3.3.1	4.0.0
Low	UBUNTU-CVE-2026-53264	linux@6.8.0-137.137	6.8.0-146.146
Low	DEBIAN-CVE-2016-2781	coreutils@9.1-1	no fix listed
Low	UBUNTU-CVE-2026-97531	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-52943	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-93203	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-107161	cyrus-sasl2@2.1.28+dfsg-10	no fix listed
Low	UBUNTU-CVE-2026-74313	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72342	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72343	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72478	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74256	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80584	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80593	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80752	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89452	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89806	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89904	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89992	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-7709	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	UBUNTU-CVE-2025-22919	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.