dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-80667	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-52497	mbedtls@2.28.8-1	2.28.8-1ubuntu0.1~esm1
Low	DEBIAN-CVE-2026-32777	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u4
Low	UBUNTU-CVE-2024-50003	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63882	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63905	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-68187	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68212	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68214	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68215	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68217	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68218	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68223	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68226	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68227	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68231	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68277	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68351	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68405	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68460	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68475	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68478	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72004	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72010	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72022	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72023	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72025	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72038	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72039	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72047	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72048	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72056	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72063	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72068	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72070	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72074	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72076	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72077	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72078	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72079	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72087	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72088	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72138	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72140	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72153	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72159	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72163	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72166	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72182	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72215	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.