dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 14 Sept 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Latest 0.38.0 19 days agoapp version 1.16.1 13Artifact Hub

dify 0.38.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 2,133 findings — 4 critical, 4 high — 2 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

22,002442801,843

2,133 findings over 10 of 11 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.16.1	0016141	1,488
langgenius/dify-api×4	1.16.1	0041325	3,705
langgenius/dify-agent-local-sandbox	1.16.1	0140241	2,949
langgenius/dify-plugin-daemon	0.6.3-local	0046467	4,713
library/nginx	latest	0030145	1,827
langgenius/dify-sandbox	0.2.15	0038225	2,608
langgenius/dify-web	1.16.1	001854	909
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	2130128	2,097
bitnamilegacy/redis×2	7.0.11-debian-11-r12	2217111	1,557
library/alpine	latest	0046	149
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

999 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-83g3-92jg-28cx	tar@7.4.3	7.5.8
Low	DEBIAN-CVE-2026-19672	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-19672	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	UBUNTU-CVE-2025-22921	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm3
Low	DEBIAN-CVE-2026-48961	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GO-2023-1987	stdlib@go1.19.9	1.19.12
Low	UBUNTU-CVE-2024-36619	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Low	ALPINE-CVE-2026-63074	openssl@3.5.5-r0	3.5.8-r0
Low	DEBIAN-CVE-2026-63074	openssl@3.0.20-1~deb12u2	no fix listed
Low	DLA-4321-1	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4
Low	GHSA-mq44-7p77-q5h7	aiohttp@3.14.1	3.14.2
Low	UBUNTU-CVE-2024-52616	avahi@0.8-13ubuntu6.2	no fix listed
Low	DLA-3926-1	perl@5.32.1-4+deb11u2	5.32.1-4+deb11u4
Low	GHSA-fc8x-2rww-xw9m	pypdf@6.14.2	6.15.0
Low	GHSA-hh9p-6wh2-4mfc	gitpython@3.1.54	3.1.58
Low	UBUNTU-CVE-2025-14831	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.5+Fips1.1
Low	DEBIAN-CVE-2025-61144	tiff@4.7.0-3+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-6238	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-g6cj-pr64-35w5	cryptography@46.0.7	50.0.0
Low	GHSA-4xh5-x5gv-qwph	pip@25.0.1	25.3
Low	GHSA-w8wr-v893-vjvp	tar@7.4.3	7.5.18
Low	UBUNTU-CVE-2026-70632	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm12
Low	ALPINE-CVE-2026-34181	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-34181	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	DEBIAN-CVE-2026-8328	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-8328	python3.12@3.12.3-1ubuntu0.13	3.12.3-1ubuntu0.15
Low	DEBIAN-CVE-2026-25210	expat@2.5.0-1+deb12u2	no fix listed
Low	GO-2023-1878	stdlib@go1.19.9	1.19.11
Low	GHSA-45gg-vh54-h5m9	golang.org/x/crypto@v0.45.0	0.52.0
Low	DEBIAN-CVE-2026-5435	glibc@2.41-12+deb13u3	no fix listed
Low	UBUNTU-CVE-2026-65703	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	GHSA-h35f-9h28-mq5c	setuptools@82.0.1	83.0.0
Low	UBUNTU-CVE-2026-59890	setuptools@68.1.2-2ubuntu1.2	no fix listed
Low	DEBIAN-CVE-2026-54369	acl@2.3.2-2+b1	no fix listed
Low	GO-2024-2963	stdlib@go1.19.9	1.21.12
Low	UBUNTU-CVE-2025-52496	mbedtls@2.28.8-1	2.28.8-1ubuntu0.1~esm1
Low	GHSA-5cv4-jp36-h3mw	golang.org/x/net@v0.47.0	0.55.0
Low	DLA-3910-1	e2fsprogs@1.46.2-2	1.46.2-2+deb11u1
Low	UBUNTU-CVE-2025-2173	zvbi@0.2.42-2	0.2.42-2ubuntu0.24.04.1~esm1
Low	DEBIAN-CVE-2026-7017	perl@5.40.1-6	5.40.1-6+deb13u1
Low	ALPINE-CVE-2026-40200	musl@1.2.5-r21	1.2.5-r23
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u6
Low	DEBIAN-CVE-2026-15806	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-15806	python3.12@3.12.3-1ubuntu0.13	no fix listed
Low	PYSEC-2026-3739	nltk@3.9.4	3.10.3
Low	UBUNTU-CVE-2026-67216	cjson@1.7.17-1	no fix listed
Low	UBUNTU-CVE-2026-16118	glib2.0@2.80.0-6ubuntu3.8	no fix listed
Low	DEBIAN-CVE-2021-4214	libpng1.6@1.6.48-1+deb13u5	no fix listed
Low	DEBIAN-CVE-2026-54371	attr@1:2.5.2-3	no fix listed
Low	PYSEC-2026-3788	gitpython@3.1.54	3.1.59

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.38.0latest	19 days ago	1.16.1	442801,843	22,002

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.