dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	BIT-postgresql-2024-10976	postgresql@15.3.0-3	13.17.0
Low	UBUNTU-CVE-2026-52927	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-52935	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53078	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-53267	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64388	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64567	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64568	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64580	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64585	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68323	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68417	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68446	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74582	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80569	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80572	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80706	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80754	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89761	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89771	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93125	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97478	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89818	linux@6.8.0-137.137	no fix listed
Low	GO-2026-5856	stdlib@go1.24.13	1.25.12
Low	UBUNTU-CVE-2025-59731	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7
Low	UBUNTU-CVE-2026-46324	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53118	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53262	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64245	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89763	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63858	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43042	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89705	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90174	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-7700	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm6
Low	UBUNTU-CVE-2025-56226	libsndfile@1.2.2-1ubuntu5.24.04.1	no fix listed
Low	UBUNTU-CVE-2026-52919	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-53089	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53129	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53272	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53273	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64188	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64246	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64249	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64563	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64581	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64583	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64584	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64599	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68442	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.