dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-74577	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80567	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80756	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80757	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80831	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80855	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80856	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80906	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80908	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80909	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80912	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80913	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80917	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80923	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98157	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98432	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-38261	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31531	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-45850	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-98158	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98358	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98379	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98383	linux@6.8.0-137.137	no fix listed
Low	DLA-4130-1	shadow@1:4.8.1-1	1:4.8.1-1+deb11u1
Low	GHSA-mcj8-r9mp-w47p	next@16.3.2	16.3.8
Low	UBUNTU-CVE-2026-31410	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31579	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43161	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43220	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43229	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53317	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64227	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98176	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98284	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98285	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98288	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98292	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98332	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98333	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98338	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2024-24864	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-69646	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-100071	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64527	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64573	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68449	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-68450	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-74553	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-74555	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80852	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.