dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-97554	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97561	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97565	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98038	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98043	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98079	linux@6.8.0-137.137	no fix listed
Low	GHSA-ff5c-cp5c-9wjf	nltk@3.10.0	3.10.3
Low	DEBIAN-CVE-2026-54370	acl@2.3.1-3	no fix listed
Low	UBUNTU-CVE-2025-40195	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53365	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-56409	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3
Low	UBUNTU-CVE-2024-58100	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90031	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90033	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90034	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93188	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93191	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93261	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93264	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93268	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93271	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93274	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93279	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93283	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2020-14304	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2022-50230	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2022-50232	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-58098	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64495	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-80765	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80767	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80781	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80782	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80783	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80788	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80790	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80792	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80793	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80796	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80805	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80808	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80809	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80814	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80819	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80824	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80826	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80827	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80829	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80830	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80843	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.