dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dify-helm

Scored 14 Sept 2026

Instant cloud deployment for https://github.com/langgenius/dify.

Latest 0.38.0 20 days agoapp version 1.16.1 13Artifact Hub

dify 0.38.0 deploys 11 container images: langgenius/dify-agent-backend, langgenius/dify-api, langgenius/dify-agent-local-sandbox, langgenius/dify-plugin-daemon and 7 more. Across the 10 measured, 2,133 findings — 4 critical, 4 high — 2 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in redis 7.0.11-1, fixed in 6.2.20.

Radar Score

22,002442801,843

2,133 findings over 10 of 11 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

11 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-agent-backend	1.16.1	0016141	1,488
langgenius/dify-api×4	1.16.1	0041325	3,705
langgenius/dify-agent-local-sandbox	1.16.1	0140241	2,949
langgenius/dify-plugin-daemon	0.6.3-local	0046467	4,713
library/nginx	latest	0030145	1,827
langgenius/dify-sandbox	0.2.15	0038225	2,608
langgenius/dify-web	1.16.1	001854	909
bitnamilegacy/postgresql×2	15.3.0-debian-11-r7	2130128	2,097
bitnamilegacy/redis×2	7.0.11-debian-11-r12	2217111	1,557
library/alpine	latest	0046	149
cr.weaviate.io/semitechnologies/weaviate	1.27.27	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,174 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-32776	expat@2.5.0-1+deb12u2	no fix listed
Low	UBUNTU-CVE-2026-5745	libarchive@3.7.2-2ubuntu0.7	3.7.2-2ubuntu0.8
Low	DEBIAN-CVE-2026-40612	jq@1.6-2.1+deb12u2	no fix listed
Low	GO-2026-6222	golang.org/x/image@v0.43.0	0.45.0
Low	DEBIAN-CVE-2026-50812	sqlite3@3.46.1-7+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-18495	tiff@4.7.0-3+deb13u3	no fix listed
Low	GO-2025-4014	stdlib@go1.19.9	1.24.8
Low	BIT-postgresql-2026-14663	postgresql@15.3.0-3	14.24.0
Low	BIT-postgresql-2026-14663	PostgreSQL@15.3.0	14.24.0
Low	ALPINE-CVE-2026-6042	musl@1.2.5-r21	1.2.5-r22
Low	BIT-redis-2024-51741	redis@7.0.11-1	7.2.8
Low	GHSA-w9m9-85wc-3x92	postcss-selector-parser@7.1.0	7.1.3
Low	UBUNTU-CVE-2025-69646	binutils@2.42-4ubuntu2.10	no fix listed
Low	UBUNTU-CVE-2026-87875	cups@2.4.7-1.2ubuntu7.14	no fix listed
Low	GO-2025-3503	stdlib@go1.19.9	1.23.7
Low	DEBIAN-CVE-2026-18938	p11-kit@0.25.5-3	no fix listed
Low	BIT-postgresql-2026-6472	PostgreSQL@15.3.0	14.23.0
Low	BIT-postgresql-2026-6472	postgresql@15.3.0-3	14.23.0
Low	GO-2026-4976	stdlib@go1.24.13	1.25.10
Low	DEBIAN-CVE-2025-5278	coreutils@9.7-3	no fix listed
Low	GO-2026-5856	stdlib@go1.24.13	1.25.12
Low	UBUNTU-CVE-2026-47714	libheif@1.17.6-1ubuntu4.4	1.17.6-1ubuntu4.6
Low	GO-2025-4007	stdlib@go1.19.9	1.24.9
Low	GO-2026-6355	golang.org/x/crypto@v0.45.0	0.56.0
Low	UBUNTU-CVE-2026-62289	libheif@1.17.6-1ubuntu4.4	1.17.6-1ubuntu4.7
Low	GO-2026-4980	stdlib@go1.24.13	1.25.10
Low	ALPINE-CVE-2026-42770	openssl@3.5.5-r0	3.5.7-r0
Low	DEBIAN-CVE-2026-42770	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
Low	GO-2026-5039	stdlib@go1.24.13	1.25.11
Low	DEBIAN-CVE-2026-63381	libevent@2.1.12-stable-8	no fix listed
Low	UBUNTU-CVE-2026-55653	openssh@1:9.6p1-3ubuntu13.16	no fix listed
Low	BIT-postgresql-2026-2003	postgresql@15.3.0-3	14.21.0
Low	BIT-postgresql-2026-2003	PostgreSQL@15.3.0	14.21.0
Low	UBUNTU-CVE-2026-75145	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DLA-4143-1	glibc@2.31-13+deb11u6	2.31-13+deb11u12
Low	GO-2025-4013	stdlib@go1.19.9	1.24.8
Low	GO-2025-3849	stdlib@go1.19.9	1.23.12
Low	GO-2026-4946	stdlib@go1.24.13	1.25.9
Low	UBUNTU-CVE-2023-50007	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm1
Low	DLA-4089-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u2
Low	DEBIAN-CVE-2021-4217	unzip@6.0-28	no fix listed
Low	DLA-4195-1	krb5@1.18.3-6+deb11u3	1.18.3-6+deb11u7
Low	DEBIAN-CVE-2026-12003	python3.11@3.11.2-6+deb12u8	no fix listed
Low	UBUNTU-CVE-2026-70631	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	GO-2026-5158	go.opentelemetry.io/otel@v1.43.0	1.42.0
Low	DEBIAN-CVE-2026-55654	openssh@1:9.2p1-2+deb12u10	no fix listed
Low	UBUNTU-CVE-2026-4367	libxpm@1:3.5.17-1build2	1:3.5.17-1ubuntu0.24.04.1
Low	UBUNTU-CVE-2026-70629	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-70630	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	DEBIAN-CVE-2026-56131	expat@2.5.0-1+deb12u2	2.5.0-1+deb12u3

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.38.0latest	20 days ago	1.16.1	442801,843	22,002

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dify-helm/dify.svg)](https://charts.stackradar.io/charts/dify-helm/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.