dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-72422	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-63912	linux@6.8.0-137.137	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63922	linux@6.8.0-137.137	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63924	linux@6.8.0-137.137	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64268	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68154	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68158	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68476	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72020	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72129	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72251	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74268	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-80976	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89482	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89485	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89494	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89495	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89538	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89643	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89655	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89712	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89783	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89969	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-63886	linux@6.8.0-137.137	6.8.0-142.142
Medium	UBUNTU-CVE-2024-35368	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Medium	UBUNTU-CVE-2026-75143	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Medium	UBUNTU-CVE-2026-72191	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89778	linux@6.8.0-137.137	no fix listed
Medium	DLA-4321-1	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4
Medium	UBUNTU-CVE-2026-64303	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68156	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89555	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89662	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-89669	linux@6.8.0-137.137	no fix listed
Medium	ALPINE-CVE-2026-18798	openssl@3.5.5-r0	3.5.8-r0
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2026-11856	curl@7.88.1-10+deb12u15	no fix listed
Medium	UBUNTU-CVE-2026-53247	linux@6.8.0-137.137	6.8.0-138.138
Medium	UBUNTU-CVE-2023-45927	slang2@2.3.3-3build2	no fix listed
Medium	UBUNTU-CVE-2026-89847	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2025-25467	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Medium	UBUNTU-CVE-2025-25467	x264@2:0.164.3108+git31e19f9-1	no fix listed
Medium	UBUNTU-CVE-2026-63978	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-64523	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-72451	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80694	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-80980	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-90048	linux@6.8.0-137.137	no fix listed
Medium	UBUNTU-CVE-2026-68161	linux@6.8.0-137.137	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72098	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.