dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 17 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 2 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,596 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,8971136545,927

6,596 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018174	1,919
langgenius/dify-api×4	1.17.0	0052372	4,440
langgenius/dify-agent-local-sandbox	1.17.0	0146296	3,565
langgenius/dify-plugin-daemon	0.6.10-local	213794,339	42,085
library/nginx	latest	0027158	1,803
langgenius/dify-sandbox	0.2.15	0045288	3,465
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,448 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-80846	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80848	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68361	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2025-68230	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93278	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93281	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2005-2541	tar@1.34+dfsg-1.2+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-5419	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
Low	UBUNTU-CVE-2025-21696	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-23131	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-89756	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-89759	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74683	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80828	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-45157	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2024-41008	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37833	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38203	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64508	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-93206	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97563	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-23162	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37747	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38096	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-63381	libevent@2.1.12-stable-8	2.1.12-stable-8+deb12u1
Low	UBUNTU-CVE-2026-87875	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	UBUNTU-CVE-2026-80695	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38038	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38189	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38272	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68324	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68353	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-27809	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-90801	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2025-22002	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37834	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40065	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40247	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-40355	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-68376	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-68093	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-90035	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93186	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93244	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93259	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93269	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93273	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-75145	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	PYSEC-2026-2275	requests@2.32.3	2.33.0
Low	UBUNTU-CVE-2025-23135	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	2 days ago	1.17.0	1136545,927	62,897
0.38.0	1 month ago	1.16.1	1147547,235	75,162

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.