dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-68160	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68477	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72041	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72226	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72319	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72351	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74267	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74384	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74398	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74427	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74737	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-80630	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72130	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-8461	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Medium	DEBIAN-CVE-2026-19931	curl@7.88.1-10+deb12u15	no fix listed
Medium	UBUNTU-CVE-2026-68159	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-72084	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72299	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72339	linux@6.8.0-137.137	6.8.0-147.147
Medium	DEBIAN-CVE-2025-0725	curl@7.88.1-10+deb12u15	no fix listed
Medium	UBUNTU-CVE-2025-57052	cjson@1.7.17-1	1.7.17-1ubuntu0.1~esm3
Medium	UBUNTU-CVE-2026-90151	linux@6.8.0-137.137	no fix listed
Medium	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Medium	UBUNTU-CVE-2026-72192	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72466	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74376	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80609	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72234	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72491	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74255	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74493	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-80600	linux@6.8.0-137.137	6.8.0-147.147
Medium	GO-2026-4337	stdlib@go1.19.9	1.24.13
Medium	BIT-postgresql-2026-6473	postgresql@15.3.0-3	14.23.0
Medium	BIT-postgresql-2026-6473	PostgreSQL@15.3.0	14.23.0
Medium	UBUNTU-CVE-2026-72065	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72069	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-34877	mbedtls@2.28.8-1	no fix listed
Medium	UBUNTU-CVE-2026-72083	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72322	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72323	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72014	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72398	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-72399	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72436	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72473	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74406	linux@6.8.0-137.137	6.8.0-147.147
Medium	ALPINE-CVE-2026-63076	openssl@3.5.5-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-63076	openssl@3.0.20-1~deb12u2	3.0.22-1~deb12u1
Medium	DEBIAN-CVE-2026-5450	glibc@2.36-9+deb12u14	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.