dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-90320	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90321	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63815	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53230	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-90137	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93165	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31493	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43009	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43263	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43352	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63853	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64076	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64077	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72042	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72198	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72375	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72488	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74264	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74344	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74687	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80628	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89808	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89810	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89814	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89906	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89920	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90146	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90324	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90343	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93154	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93237	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-15079	curl@7.88.1-10+deb12u15	no fix listed
Low	UBUNTU-CVE-2026-74461	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74589	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74604	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80932	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89469	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80576	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43303	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63879	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80994	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-22104	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53366	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72072	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72126	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72335	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72449	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72476	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74359	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74363	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.