dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-90360	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80626	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-66864	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2025-69651	binutils@2.42-4ubuntu2.10	no fix listed
Low	ALPINE-CVE-2026-42768	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42768	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	UBUNTU-CVE-2026-64420	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-98083	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98230	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80794	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80795	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80797	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80801	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80802	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80803	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80823	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2023-39328	openjpeg2@2.5.0-2ubuntu0.5	no fix listed
Low	UBUNTU-CVE-2025-40003	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40146	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-49940	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90169	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-58045	nodejs@22.21.0-1nodesource1	no fix listed
Low	UBUNTU-CVE-2024-50102	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-35189	openssl@3.0.20-1~deb12u2	no fix listed
Low	DEBIAN-CVE-2026-19542	glibc@2.36-9+deb12u14	no fix listed
Low	UBUNTU-CVE-2026-68278	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74382	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-18393	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-53612	util-linux@2.41-5	2.41.5-0+deb13u1
Low	UBUNTU-CVE-2024-53056	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68447	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-59995	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	DEBIAN-CVE-2026-59996	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2025-59438	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-68360	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72441	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74331	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2024-49904	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68480	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80789	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80799	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89575	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-56391	coreutils@9.1-1	no fix listed
Low	GHSA-pf96-p4fj-6566	httpx2@2.5.0	2.11.0
Low	UBUNTU-CVE-2024-49990	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89732	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98154	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-107675	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-68359	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72236	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.