dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2018-17977	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-49932	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-53064	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68768	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64572	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68413	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80807	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89765	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93204	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63943	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64538	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68396	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89473	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89673	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89800	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89802	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89839	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89842	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89874	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89900	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89933	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89944	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89950	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89955	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89975	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90024	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90060	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90066	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90076	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90109	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90112	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90119	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90125	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90130	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90135	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90150	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90159	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90170	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90175	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90187	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90213	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90220	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90262	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90279	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90280	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90282	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90313	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90322	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90364	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90368	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.