dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-90206	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90208	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90232	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90247	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90253	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90254	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90261	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90263	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90264	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90265	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90267	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90273	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90300	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90311	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90315	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90328	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90330	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90335	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90336	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90337	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90345	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90346	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90351	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90359	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90363	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90365	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90404	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90417	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90421	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90422	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92476	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92480	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92482	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92493	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92499	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92503	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-92520	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93058	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93099	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93100	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93109	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93129	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93146	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93161	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93163	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93182	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93185	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93202	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93247	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-48965	mbedtls@2.28.8-1	2.28.8-1ubuntu0.1~esm1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.