dify 0.10.0 Helm chart

Name: dify Helm chart 0.10.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Version 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

8,080 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-68125	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-46138	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46232	linux@6.8.0-88.89	6.8.0-136.136
Low	ALPINE-CVE-2026-84782	openssl@3.3.5-r0	3.3.7-r2
Low	DEBIAN-CVE-2026-84782	openssl@3.0.11-1~deb12u2	no fix listed
Low	UBUNTU-CVE-2025-40043	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-68471	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80645	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-37555	libsndfile@1.2.2-1ubuntu5.24.04.1	no fix listed
Low	UBUNTU-CVE-2026-90380	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-93189	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-68817	linux@6.8.0-88.89	6.8.0-110.110
Low	DEBIAN-CVE-2025-6395	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u5
Low	UBUNTU-CVE-2026-46052	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-53199	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-64048	linux@6.8.0-88.89	6.8.0-139.139
Low	UBUNTU-CVE-2026-64312	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-68299	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74523	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74625	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74626	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74717	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80527	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80987	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89477	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89684	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89699	linux@6.8.0-88.89	no fix listed
Low	BIT-postgis-2026-73515	Postgis@3.4.2	3.7.0
Low	GO-2026-6355	golang.org/x/crypto@v0.38.0	0.56.0
Low	UBUNTU-CVE-2026-52974	linux@6.8.0-88.89	6.8.0-136.136
Low	DSA-5990-1	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u4
Low	UBUNTU-CVE-2025-40087	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-34876	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2018-12930	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-3644	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	GO-2025-3751	stdlib@go1.23.3	1.23.10
Low	GHSA-gmj6-6f8f-6699	jinja2@3.0.3	3.1.5
Low	UBUNTU-CVE-2026-66039	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm11
Low	UBUNTU-CVE-2026-53176	linux@6.8.0-88.89	6.8.0-137.137
Low	UBUNTU-CVE-2026-52967	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-34872	mbedtls@2.28.8-1	no fix listed
Low	DEBIAN-CVE-2026-5928	glibc@2.36-9+deb12u7	no fix listed
Low	GHSA-8qq5-rm4j-mr97	tar@6.2.0	7.5.3
Low	UBUNTU-CVE-2026-23246	linux@6.8.0-88.89	6.8.0-136.136
Low	DEBIAN-CVE-2025-15281	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	UBUNTU-CVE-2026-98096	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-38471	linux@6.8.0-88.89	6.8.0-100.100
Low	UBUNTU-CVE-2026-56210	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	UBUNTU-CVE-2026-53183	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-53184	linux@6.8.0-88.89	6.8.0-146.146

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.