dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-80861	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80901	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80904	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97502	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97506	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97507	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97510	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98374	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98378	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98381	linux@6.8.0-137.137	no fix listed
Low	DEBIAN-CVE-2026-50812	sqlite3@3.40.1-2+deb12u2	no fix listed
Low	UBUNTU-CVE-2022-50380	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2025-37743	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31537	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-31777	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43034	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43118	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43191	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43204	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43234	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43294	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43298	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43301	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43308	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43309	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43310	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43443	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43463	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43485	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-45897	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-45901	linux@6.8.0-137.137	6.8.0-147.147
Low	UBUNTU-CVE-2026-45934	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-45940	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-45961	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46059	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46066	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46071	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46147	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46148	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46171	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-46245	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53017	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53018	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53104	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53107	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53292	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53297	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-53377	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-63973	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-64060	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.