dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-68204	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68206	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68209	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68210	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68213	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68216	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68338	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68461	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72066	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72067	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72255	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72282	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72314	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72350	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72371	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72400	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72406	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72419	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72435	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72444	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72450	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72459	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72480	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74283	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74288	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74293	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74296	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74297	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74305	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74312	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74330	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74467	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74551	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74647	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80559	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80560	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80565	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80583	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80591	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80598	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80613	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80619	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80649	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80677	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80680	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80709	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80718	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89510	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89609	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89870	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.