dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-89960	linux@6.8.0-137.137	no fix listed
Low	DLA-4251-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u8
Low	UBUNTU-CVE-2026-63917	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64280	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68294	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72045	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72051	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72052	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72053	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72054	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72055	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72136	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74690	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74711	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80653	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-53240	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89929	linux@6.8.0-137.137	no fix listed
Low	ALPINE-CVE-2026-42767	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42767	openssl@3.0.20-1~deb12u2	3.0.22-1~deb12u1
Low	UBUNTU-CVE-2026-64018	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-89448	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u8	3.11.2-6+deb12u9
Low	UBUNTU-CVE-2026-15806	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-97536	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2023-26242	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-52491	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-5545	curl@7.88.1-10+deb12u15	no fix listed
Low	UBUNTU-CVE-2026-89811	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-89157	pcre2@10.42-1	10.42-1+deb12u1
Low	UBUNTU-CVE-2026-72489	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74631	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89782	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93196	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72423	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72499	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74527	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-72897	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3
Low	UBUNTU-CVE-2026-89777	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89932	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-21687	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-82049	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-68329	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80726	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-36366	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64379	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-40014	linux@6.8.0-137.137	6.8.0-147.147
Low	BIT-postgresql-2023-2455	postgresql@15.3.0-3	11.20.0
Low	GO-2026-4970	stdlib@go1.24.13	1.25.12
Low	UBUNTU-CVE-2025-1272	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63926	linux@6.8.0-137.137	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.