dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-64029	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64189	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64418	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-37870	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37877	linux@6.8.0-137.137	no fix listed
Low	GO-2026-6599	stdlib@go1.26.7	1.26.9
Low	GO-2026-6600	stdlib@go1.26.7	1.26.9
Low	UBUNTU-CVE-2025-27810	mbedtls@2.28.8-1	2.28.8-1ubuntu0.1~esm1
Low	UBUNTU-CVE-2026-52917	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-53149	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64436	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-63891	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-34871	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-31663	linux@6.8.0-137.137	6.8.0-146.146
Low	DEBIAN-CVE-2026-72522	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	UBUNTU-CVE-2026-80578	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68453	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2025-14104	util-linux@2.38.1-5+deb12u3	no fix listed
Low	UBUNTU-CVE-2026-3441	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-3442	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-52915	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-53138	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64121	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-64496	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64546	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74485	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74603	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80663	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-81007	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89640	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98331	linux@6.8.0-137.137	no fix listed
Low	GHSA-8wjv-2p76-3863	pyjwt@2.13.0	2.14.0
Low	GHSA-q2hr-2g5m-vwhr	brace-expansion@2.0.2	2.1.7
Low	UBUNTU-CVE-2026-53179	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53205	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63833	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-64407	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-81011	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89691	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93229	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97496	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98360	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-23327	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-98330	linux@6.8.0-137.137	no fix listed
Low	GHSA-54p9-h82j-f925	multidict@6.7.0	6.9.1
Low	GHSA-v5mq-3xhg-98m9	unstructured@0.21.5	0.24.1
Low	UBUNTU-CVE-2026-46054	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37876	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-53613	util-linux@2.38.1-5+deb12u3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.