dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-72245	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2024-58089	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98025	linux@6.8.0-137.137	no fix listed
Low	DLA-3930-1	libsepol@3.1-1	3.1-1+deb11u1
Low	UBUNTU-CVE-2026-4647	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-63892	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-93241	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93243	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64510	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2023-52879	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-18090	gdk-pixbuf@2.42.10+dfsg-3ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2026-90219	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90393	linux@6.8.0-137.137	no fix listed
Low	DLA-4319-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u9
Low	UBUNTU-CVE-2025-69647	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2022-49940	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-58094	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63890	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63897	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63898	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63899	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63900	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63901	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63902	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63903	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63904	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-72106	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72260	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89645	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89796	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-57976	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-50422	cairo@1.18.0-3build1	no fix listed
Low	UBUNTU-CVE-2026-93242	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-50219	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	DLA-4146-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u7
Low	GHSA-3w57-8xmc-8v26	anyio@4.14.1	4.14.2
Low	DEBIAN-CVE-2026-12345	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-12345	python3.12@3.12.3-1ubuntu0.15	no fix listed
Low	UBUNTU-CVE-2026-53090	linux@6.8.0-137.137	6.8.0-147.147
Low	BIT-gdal-2026-8084	GDAL@3.7.0	3.13.0
Low	UBUNTU-CVE-2024-49970	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40102	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64513	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74466	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80616	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2022-48846	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90198	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90283	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90314	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-56412	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.