dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-80594	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80595	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80597	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80605	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80867	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80875	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80876	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80877	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80879	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80881	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80886	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80902	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89621	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89628	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89895	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89925	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89936	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89949	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89964	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90214	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90249	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90296	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90303	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90348	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90386	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90420	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93040	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93041	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93141	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93158	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93159	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93167	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98209	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-52560	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40332	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40340	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72073	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80948	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89527	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90023	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90200	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92500	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93180	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53185	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2024-14027	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-56544	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63876	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63877	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-93240	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-18938	p11-kit@0.24.1-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.