dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74381	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74399	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74424	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74459	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74494	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74514	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74659	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80618	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80620	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80770	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80772	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80865	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80870	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80880	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80891	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80910	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89926	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90090	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90122	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90209	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90221	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90257	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90287	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90378	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93115	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93131	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93136	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93142	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93152	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97558	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98213	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-58012	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68781	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63896	linux@6.8.0-137.137	6.8.0-146.146
Low	ALPINE-CVE-2026-42769	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42769	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	UBUNTU-CVE-2026-96611	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-31486	linux@6.8.0-137.137	6.8.0-139.139
Low	UBUNTU-CVE-2026-16768	gdk-pixbuf@2.42.10+dfsg-3ubuntu3.3	no fix listed
Low	UBUNTU-CVE-2024-35995	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-42139	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68356	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63908	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63931	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63934	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63948	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63958	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63960	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63964	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-63967	linux@6.8.0-137.137	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.