dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-34180	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-31649	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-80725	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-45988	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-46289	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-64383	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64384	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64385	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64386	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64387	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64391	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68381	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89530	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89550	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89652	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89676	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89702	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-92489	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31706	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-72382	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74522	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-90162	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2026-7383	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Medium	GHSA-2v4p-qf9q-27wj	google.golang.org/grpc@v1.72.0	1.82.2
Medium	UBUNTU-CVE-2026-31414	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2025-37899	linux@6.8.0-88.89	6.8.0-101.101
Medium	DEBIAN-CVE-2024-33601	glibc@2.36-9+deb12u6	2.36-9+deb12u7
Medium	UBUNTU-CVE-2025-68263	linux@6.8.0-88.89	6.8.0-110.110
Medium	UBUNTU-CVE-2026-23450	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-43379	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-72463	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74345	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89659	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89708	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43501	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-31668	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-43414	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-53246	linux@6.8.0-88.89	6.8.0-138.138
Medium	UBUNTU-CVE-2026-89675	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31448	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2019-15794	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-63825	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2025-9232	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3
Medium	USN-8039-1	libpng1.6@1.6.43-5build1	1.6.43-5ubuntu0.5
Medium	UBUNTU-CVE-2026-31432	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-43490	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-72420	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74752	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2018-18064	cairo@1.18.0-3build1	no fix listed
Medium	UBUNTU-CVE-2026-31450	linux@6.8.0-88.89	6.8.0-136.136

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.