dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2024-9143	openssl@3.0.11-1~deb12u2	3.0.15-1~deb12u1
Medium	GO-2026-6604	stdlib@go1.23.3	1.26.9
Medium	UBUNTU-CVE-2026-46115	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-64000	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64136	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2026-64399	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74406	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74474	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89633	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43187	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-89713	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2013-7445	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64033	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2024-35365	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Medium	UBUNTU-CVE-2026-90037	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-46273	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2020-26560	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74475	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2026-8376	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Medium	UBUNTU-CVE-2021-36691	jpeg-xl@0.7.0-10.2ubuntu6.1	no fix listed
Medium	UBUNTU-CVE-2026-31409	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-52911	linux@6.8.0-88.89	6.8.0-136.136
Medium	BIT-postgresql-2026-14669	PostgreSQL@16.3.0-3	14.24.0
Medium	BIT-postgresql-2026-14669	postgresql@16.3.0-3	14.24.0
Medium	UBUNTU-CVE-2026-80714	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2025-34034	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-46137	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-64397	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68302	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74608	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80603	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-52999	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-93207	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2025-27113	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	UBUNTU-CVE-2026-33416	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.6
Medium	UBUNTU-CVE-2026-90036	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-63919	linux@6.8.0-88.89	6.8.0-146.146
Medium	UBUNTU-CVE-2026-72107	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72160	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89493	linux@6.8.0-88.89	no fix listed
Medium	GO-2024-3107	stdlib@go1.21.9	1.22.7
Medium	UBUNTU-CVE-2026-64830	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Medium	UBUNTU-CVE-2026-18924	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.15
Medium	UBUNTU-CVE-2025-68301	linux@6.8.0-88.89	6.8.0-106.106
Medium	UBUNTU-CVE-2026-23112	linux@6.8.0-88.89	6.8.0-111.111
Medium	GHSA-2phv-j68v-wwqx	pnpm@10.22.0	10.27.0
Medium	UBUNTU-CVE-2026-72492	linux@6.8.0-88.89	6.8.0-147.147
Medium	GHSA-xvcm-6775-5m9r	immutable@5.1.4	5.1.8
Medium	UBUNTU-CVE-2025-69720	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1
Medium	UBUNTU-CVE-2025-40257	linux@6.8.0-88.89	6.8.0-106.106

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.