dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 16 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,595 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7971136535,927

6,595 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,426
langgenius/dify-agent-local-sandbox	1.17.0	0146295	3,544
langgenius/dify-plugin-daemon	0.6.10-local	213784,340	42,043
library/nginx	latest	0027158	1,799
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74563	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74583	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63806	linux@6.8.0-137.137	6.8.0-147.147
Low	DEBIAN-CVE-2026-56403	expat@2.7.5-1	2.8.2-1~deb13u1
Low	UBUNTU-CVE-2026-64239	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-98366	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-21717	nodejs@22.21.0-1nodesource1	no fix listed
Low	UBUNTU-CVE-2025-38636	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-94283	libx11@2:1.8.12-1	no fix listed
Low	UBUNTU-CVE-2026-93545	libxi@2:1.8.1-1build1	no fix listed
Low	UBUNTU-CVE-2026-94281	libxi@2:1.8.1-1build1	no fix listed
Low	UBUNTU-CVE-2026-52991	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97513	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-71204	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-40225	systemd@257.9-1~deb13u1	257.13-1~deb13u1
Low	UBUNTU-CVE-2026-93260	linux@6.8.0-137.137	no fix listed
Low	GHSA-3jxr-9vmj-r5cp	brace-expansion@2.0.2	2.1.2
Low	UBUNTU-CVE-2024-14040	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46181	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92522	linux@6.8.0-137.137	no fix listed
Low	GO-2025-3750	stdlib@go1.19.9	1.23.10
Low	UBUNTU-CVE-2026-68103	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72397	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90401	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-43872	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64098	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-45944	linux@6.8.0-137.137	6.8.0-147.147
Low	GHSA-42vr-xj54-vc7v	pyjwt@2.13.0	2.15.0
Low	UBUNTU-CVE-2026-92488	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2019-20794	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46330	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-13595	util-linux@2.39.3-9ubuntu6.5	2.39.3-9ubuntu6.6
Low	DEBIAN-CVE-2026-78409	util-linux@2.41-5	no fix listed
Low	UBUNTU-CVE-2026-97926	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-54764	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-64126	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-53143	linux@6.8.0-137.137	6.8.0-146.146
Low	DEBIAN-CVE-2026-75804	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3
Low	UBUNTU-CVE-2026-74684	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2023-31439	systemd@257.9-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-106585	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2025-66866	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2024-53241	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93116	linux@6.8.0-137.137	no fix listed
Low	GHSA-vmf3-w455-68vh	tar@7.4.3	7.5.16
Low	BIT-postgresql-2024-10978	postgresql@15.3.0-3	12.21.0
Low	BIT-postgresql-2024-10978	PostgreSQL@15.3.0	12.21.0
Low	UBUNTU-CVE-2026-64315	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89456	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92504	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136535,927	62,797
0.38.0	1 month ago	1.16.1	1147547,235	75,134

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.