dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

669 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-72320	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89672	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43232	linux@6.8.0-88.89	6.8.0-134.134
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.3	9.0.6
Medium	UBUNTU-CVE-2026-31476	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2025-40320	linux@6.8.0-88.89	6.8.0-106.106
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.10	7.5.11
Medium	UBUNTU-CVE-2026-27135	nghttp2@1.59.0-1ubuntu0.2	1.59.0-1ubuntu0.3
Medium	UBUNTU-CVE-2026-43465	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-53224	linux@6.8.0-88.89	6.8.0-138.138
Medium	UBUNTU-CVE-2026-23231	linux@6.8.0-88.89	6.8.0-111.111
Medium	UBUNTU-CVE-2026-46043	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-53043	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-53186	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63992	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64551	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-90414	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-68343	linux@6.8.0-88.89	6.8.0-147.147
Medium	ALPINE-CVE-2026-63072	openssl@3.3.5-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.11-1~deb12u2	3.0.22-1~deb12u1
Medium	UBUNTU-CVE-2026-64400	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43037	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2020-26556	linux@6.8.0-88.89	no fix listed
Medium	BIT-redis-2025-46819	Redis (TM)@7.2.4-4	6.2.20
Medium	BIT-redis-2025-46819	redis@7.2.4-4	6.2.20
Medium	UBUNTU-CVE-2026-80587	linux@6.8.0-88.89	no fix listed
Medium	ALPINE-CVE-2025-69420	openssl@3.3.5-r0	3.3.6-r0
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Medium	UBUNTU-CVE-2026-72493	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89532	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89650	linux@6.8.0-88.89	no fix listed
Medium	BIT-postgresql-2026-15742	postgresql@16.3.0-3	14.24.0
Medium	BIT-postgresql-2026-15742	PostgreSQL@16.3.0-3	14.24.0
Medium	UBUNTU-CVE-2026-80945	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89671	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Medium	UBUNTU-CVE-2026-31657	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-52931	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-53088	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-53309	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-68082	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74436	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74556	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80586	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31705	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-43499	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-46135	linux@6.8.0-88.89	6.8.0-134.134
Medium	ALPINE-CVE-2026-28388	openssl@3.3.5-r0	3.3.7-r0
Medium	DEBIAN-CVE-2026-28388	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	GHSA-mf9v-mfxr-j63j	urllib3@2.6.1	2.7.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.