StackRadar

dify 0.10.0 Helm chart

doubanVerified publisher

Scored 20 Oct 2026

A Helm chart for Dify

Version 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images
ImageTagVulnerabilitiesRadar Score
langgenius/dify-api×31.10.1-fix.1—not yet scanned
langgenius/dify-web1.10.1-fix.111392133,061
langgenius/dify-sandbox0.2.1200271401,987
langgenius/dify-plugin-daemon0.5.1-local565457,71970,572
bitnamilegacy/postgresql16.3.0-debian-12-r444863075,133
bitnamilegacy/redis7.2.4-debian-12-r1345832494,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

8,080 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

SeverityAdvisoryPackageFixed in
LowUBUNTU-CVE-2026-64430linux@6.8.0-88.896.8.0-147.147
LowUBUNTU-CVE-2026-74621linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-74692linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-74696linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-93830linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-97417linux@6.8.0-88.89no fix listed
LowGHSA-c2c7-rcm5-vvqjpicomatch@4.0.24.0.4
LowUBUNTU-CVE-2026-34874mbedtls@2.28.8-1no fix listed
LowUBUNTU-CVE-2026-57585python-pip@24.0+dfsg-1ubuntu1.3no fix listed
LowGO-2026-4342stdlib@go1.23.31.24.12
LowUBUNTU-CVE-2026-31613linux@6.8.0-88.896.8.0-136.136
LowUBUNTU-CVE-2026-82209curl@8.5.0-2ubuntu10.68.5.0-2ubuntu10.15
LowUBUNTU-CVE-2026-63893linux@6.8.0-88.896.8.0-146.146
LowGHSA-rp42-5vxx-qpwrbasic-ftp@5.0.55.3.0
LowUBUNTU-CVE-2026-43253linux@6.8.0-88.896.8.0-134.134
LowUBUNTU-CVE-2026-87933cjson@1.7.17-1no fix listed
LowUBUNTU-CVE-2025-38527linux@6.8.0-88.896.8.0-100.100
LowUBUNTU-CVE-2025-40253linux@6.8.0-88.896.8.0-106.106
LowGHSA-c475-qrg2-pj4rbasic-ftp@5.0.56.2.1
LowALPINE-CVE-2026-85091zlib@1.3.1-r21.3.2-r1
LowDEBIAN-CVE-2026-85091zlib@1:1.2.13.dfsg-1no fix listed
LowGHSA-4c8g-83qw-93j6fast-uri@3.1.03.1.3
LowUBUNTU-CVE-2023-49528ffmpeg@7:6.1.1-3ubuntu57:6.1.1-3ubuntu5+esm1
LowGHSA-w466-c33r-3gjppnpm@10.22.010.34.2
LowGHSA-73rr-hh4g-fpgxdiff@5.1.05.2.2
LowUBUNTU-CVE-2018-12931linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-47247libheif@1.17.6-1ubuntu4.11.17.6-1ubuntu4.4
LowUBUNTU-CVE-2026-64210linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-74550linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-74624linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-74678linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-90041linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-46124linux@6.8.0-88.896.8.0-136.136
LowGHSA-7vhp-vf5g-r2fwpnpm@10.22.010.26.0
LowGO-2026-5970golang.org/x/text@v0.25.00.39.0
LowUBUNTU-CVE-2023-49501ffmpeg@7:6.1.1-3ubuntu57:6.1.1-3ubuntu5+esm1
LowUBUNTU-CVE-2025-36184linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2025-40171linux@6.8.0-88.896.8.0-106.106
LowUBUNTU-CVE-2026-59843libssh@0.10.6-2ubuntu0.20.10.6-2ubuntu0.5
LowDEBIAN-CVE-2026-42497perl@5.36.0-7+deb12u15.36.0-7+deb12u4
LowUBUNTU-CVE-2026-43029linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-64148linux@6.8.0-88.896.8.0-139.139
LowBIT-postgresql-2026-6471PostgreSQL@16.3.0-314.24.0
LowBIT-postgresql-2026-6471postgresql@16.3.0-314.24.0
LowUBUNTU-CVE-2026-23242linux@6.8.0-88.896.8.0-134.134
LowUBUNTU-CVE-2026-46114linux@6.8.0-88.896.8.0-136.136
LowUBUNTU-CVE-2026-52946linux@6.8.0-88.89no fix listed
LowUBUNTU-CVE-2026-43114linux@6.8.0-88.896.8.0-134.134
LowUBUNTU-CVE-2025-68241linux@6.8.0-88.896.8.0-106.106
LowUBUNTU-CVE-2025-68336linux@6.8.0-88.896.8.0-110.110

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.10.0latest3 months ago1.10.1-fix.114167808,62885,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 20 Oct 2026 · scanned 20 Oct 2026 · advisories as of 20 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.