dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 yesterdayapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-46175	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53368	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90260	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	DEBIAN-CVE-2011-3374	apt@2.6.1	no fix listed
Low	UBUNTU-CVE-2021-31615	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53109	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63814	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-63870	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64036	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64078	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64191	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68400	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93817	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-22108	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2023-31082	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-89161	pcre2@10.42-1	10.42-1+deb12u1
Low	UBUNTU-CVE-2026-53157	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53160	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53161	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63812	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-63816	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64011	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64103	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64123	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64221	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64329	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64340	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64342	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64343	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64344	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64362	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64372	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64401	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64543	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68153	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68236	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68445	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74289	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74450	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74471	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74479	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74482	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74496	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74512	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74518	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74548	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74609	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74613	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74637	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	yesterday	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.