dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,451
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,276
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,253
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-64298	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64299	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64318	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64323	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72213	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72297	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80662	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89608	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89731	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90062	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-36618	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Low	UBUNTU-CVE-2016-8660	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2013-4392	systemd@252.39-1~deb12u2	no fix listed
Low	UBUNTU-CVE-2026-74565	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74724	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80716	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-52584	jpeg-xl@0.7.0-10.2ubuntu6.1	no fix listed
Low	UBUNTU-CVE-2026-89443	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-55653	openssh@1:9.6p1-3ubuntu13.18	no fix listed
Low	UBUNTU-CVE-2026-52909	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53265	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64539	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74574	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89762	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93782	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97991	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2024-4317	postgresql@15.3.0-3	14.12.0
Low	BIT-postgresql-2024-4317	PostgreSQL@15.3.0	14.12.0
Low	UBUNTU-CVE-2026-41989	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
Low	USN-8329-1	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm8
Low	DEBIAN-CVE-2026-75806	openssl@3.0.20-1~deb12u2	no fix listed
Low	PYSEC-2026-3726	nltk@3.10.0	3.10.2
Low	UBUNTU-CVE-2026-42014	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2025-0518	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm3
Low	UBUNTU-CVE-2026-53270	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64242	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64574	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98364	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-106553	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-106555	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-68229	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72049	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74713	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92525	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93178	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-56406	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DEBIAN-CVE-2026-56407	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	BIT-postgresql-2024-10976	PostgreSQL@15.3.0	13.17.0
Low	BIT-postgresql-2024-10976	postgresql@15.3.0-3	13.17.0
Low	UBUNTU-CVE-2026-52927	linux@6.8.0-137.137	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.