dify 0.39.0 Helm chart

Name: dify Helm chart 0.39.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 18 Oct 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Version 0.39.0 3 days agoapp version 1.17.0 12Artifact Hub

dify 0.39.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 6,614 findings — 11 critical, 3 high — 5 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

62,7841136535,945

6,614 findings over 10 of 11 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.17.0	0018176	1,934
langgenius/dify-api×4	1.17.0	0052374	4,455
langgenius/dify-agent-local-sandbox	1.17.0	0146298	3,582
langgenius/dify-plugin-daemon	0.6.10-local	213784,351	41,927
library/nginx	latest	0027158	1,802
langgenius/dify-sandbox	0.2.15	0045288	3,464
langgenius/dify-web	1.17.0	001969	1,073
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	4034125	2,273
bitnamilegacy/redis×2	7.0.11-debian-11-r12	5134105	2,261
library/alpine	latest	0001	13
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

5,450 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-80922	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-80925	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97500	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97512	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97516	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97517	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98124	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98142	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98373	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98377	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98382	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98384	linux@6.8.0-137.137	no fix listed
Low	BIT-redis-2024-51741	redis@7.0.11-1	7.2.8
Low	UBUNTU-CVE-2026-43115	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-43410	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-64094	linux@6.8.0-137.137	6.8.0-146.146
Low	UBUNTU-CVE-2026-80785	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-93216	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97422	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97423	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97426	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97431	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97432	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97479	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97480	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97493	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97498	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97499	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97504	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97505	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97514	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97518	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97521	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98125	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98148	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98177	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-107697	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-23017	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-97501	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-90829	binutils@2.42-4ubuntu2.10	no fix listed
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42770	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GHSA-jp4c-xjxw-mgf9	pip@25.0.1	26.1
Low	UBUNTU-CVE-2026-6357	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2025-38207	linux@6.8.0-137.137	no fix listed
Low	BIT-postgresql-2026-2003	postgresql@15.3.0-3	14.21.0
Low	BIT-postgresql-2026-2003	PostgreSQL@15.3.0	14.21.0
Low	UBUNTU-CVE-2025-37907	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98353	linux@6.8.0-137.137	no fix listed
Low	UBUNTU-CVE-2026-98355	linux@6.8.0-137.137	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.39.0latest	3 days ago	1.17.0	1136535,945	62,784
0.38.0	1 month ago	1.16.1	1147547,235	75,160

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.