dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-46275	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-63881	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-80550	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-52492	tiff@4.7.0-3+deb13u3	no fix listed
Low	GO-2026-4980	stdlib@go1.24.13	1.25.10
Low	UBUNTU-CVE-2026-65705	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-65706	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-68432	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-7017	perl@5.36.0-7+deb12u3	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2024-25743	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-86144	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-53053	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53354	linux@6.8.0-137.137	6.8.0-142.142
Low	UBUNTU-CVE-2026-64109	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64555	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68454	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68466	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74443	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74515	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74607	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74262	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80747	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38565	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64529	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68107	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2023-6238	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u6	no fix listed
Low	UBUNTU-CVE-2025-38069	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72487	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-81016	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90341	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-15366	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2025-15366	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-74507	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63829	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.1-4	no fix listed
Low	UBUNTU-CVE-2026-63797	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72262	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-81010	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2023-39418	PostgreSQL@15.3.0	15.4.0
Low	BIT-postgresql-2023-39418	postgresql@15.3.0-3	15.4.0
Low	UBUNTU-CVE-2024-44951	linux@6.8.0-137.137	no fix listed
Low	GO-2024-2600	stdlib@go1.19.9	1.21.8
Low	UBUNTU-CVE-2026-74580	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74615	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80921	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68255	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	DEBIAN-CVE-2026-102010	gcc-12@12.2.0-14+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-102010	gcc-defaults@4:13.2.0-7ubuntu1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.