dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-89883	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89887	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89922	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90143	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90225	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90309	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93095	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93138	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93170	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-52615	avahi@0.8-13ubuntu6.2	no fix listed
Low	UBUNTU-CVE-2022-44034	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-1352	elfutils@0.190-1.1ubuntu0.1	no fix listed
Low	UBUNTU-CVE-2026-90407	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31479	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43126	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53120	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63970	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68219	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72315	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72340	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72352	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72369	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72410	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72434	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72470	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74270	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74338	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74397	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74417	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74646	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80526	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80710	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89441	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89832	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89902	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89903	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89961	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90026	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90027	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90030	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93144	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93192	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53361	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-63818	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-93827	linux@6.8.0-137.137	no fix listed
Low	GO-2025-4011	stdlib@go1.19.9	1.24.8
Low	GO-2025-4015	stdlib@go1.19.9	1.24.8
Low	UBUNTU-CVE-2025-40344	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72390	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-90199	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.