dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-97916	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97917	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97918	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97919	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97924	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97929	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97933	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97934	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97936	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97938	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97939	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97945	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97950	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97966	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97992	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97994	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98086	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98168	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98170	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98231	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98248	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2023-54190	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-21907	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37806	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37807	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40097	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40098	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-68188	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68802	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-75805	openssl@3.0.20-1~deb12u2	no fix listed
Low	UBUNTU-CVE-2025-40136	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68235	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68241	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68242	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68312	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68412	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-72205	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74272	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74342	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80899	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89556	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89773	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89809	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89862	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90098	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90259	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93047	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93081	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93181	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93251	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.