dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2025-36123	linux@6.8.0-137.137	no fix listed
Low	GO-2025-3503	stdlib@go1.19.9	1.23.7
Low	DEBIAN-CVE-2025-29088	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-89749	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-50813	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	DEBIAN-CVE-2025-9403	jq@1.6-2.1+deb12u2	no fix listed
Low	UBUNTU-CVE-2024-56702	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63928	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63933	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63956	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63957	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63961	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-68130	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68180	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68184	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68186	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68188	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68197	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68250	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68304	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68313	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68322	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68368	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68410	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72015	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72117	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72118	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72142	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72152	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-72155	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80941	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80966	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80968	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80969	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80973	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89491	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89512	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89576	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89595	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89730	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89780	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90054	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90058	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90070	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90072	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90114	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90290	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92524	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93140	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98167	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.