dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74656	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74660	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74714	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80952	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89488	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89508	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89548	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89736	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92510	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92511	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98116	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98368	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31614	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72460	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74292	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74295	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89792	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-57175	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2024-35195	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	UBUNTU-CVE-2026-68116	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-25834	mbedtls@2.28.8-1	no fix listed
Low	BIT-gdal-2026-49014	GDAL@3.7.0	3.13.1
Low	UBUNTU-CVE-2026-72089	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89838	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53156	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63819	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64017	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64305	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64421	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64424	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64433	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68263	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68290	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68427	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74606	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74634	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74661	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74700	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74725	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98023	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98122	linux@6.8.0-137.137	no fix listed
Low	GHSA-hp3w-g68c-fv3c	sprintf-js@1.1.3	no fix listed
Low	UBUNTU-CVE-2026-63823	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-63827	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64023	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64341	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64556	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74388	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31568	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46130	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.