dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-90202	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90218	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90222	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90226	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90251	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90281	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90284	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90285	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90298	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90307	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90319	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90334	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90361	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90362	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90382	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90411	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90416	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90431	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90434	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92495	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92496	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93049	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93061	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93120	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93236	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93238	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97568	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97572	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97592	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97596	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97597	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97598	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97601	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97604	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97904	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97905	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97906	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97909	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97923	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97927	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97993	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97998	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98076	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98077	linux@6.8.0-137.137	no fix listed
Low	ALPINE-CVE-2026-27171	zlib@1.3.1-r2	1.3.2-r0
Low	DEBIAN-CVE-2026-27171	zlib@1:1.2.13.dfsg-1	no fix listed
Low	UBUNTU-CVE-2026-63962	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63963	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63983	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68203	linux@6.8.0-137.137	6.8.0-147.147

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.