dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2025-68315	linux@6.8.0-88.89	6.8.0-106.106
Medium	UBUNTU-CVE-2025-68741	linux@6.8.0-88.89	6.8.0-110.110
Medium	UBUNTU-CVE-2026-43407	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-64450	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-6100	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Medium	ALPINE-CVE-2025-69421	openssl@3.3.5-r0	3.3.6-r0
Medium	DEBIAN-CVE-2025-69421	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Medium	UBUNTU-CVE-2026-46037	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-64160	linux@6.8.0-88.89	no fix listed
Medium	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.72.0	1.83.1
Medium	UBUNTU-CVE-2026-64091	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2025-68809	linux@6.8.0-88.89	6.8.0-110.110
Medium	UBUNTU-CVE-2026-33191	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-100075	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31659	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-53355	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-74581	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89601	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-46119	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-46185	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-64319	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-11972	python3.12@3.12.3-1ubuntu0.9	no fix listed
Medium	USN-8093-1	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4
Medium	UBUNTU-CVE-2026-72320	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89672	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43232	linux@6.8.0-88.89	6.8.0-134.134
Medium	GHSA-3ppc-4f35-3m26	minimatch@9.0.3	9.0.6
Medium	UBUNTU-CVE-2026-31476	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2025-40320	linux@6.8.0-88.89	6.8.0-106.106
Medium	GHSA-96hv-2xvq-fx4p	ws@7.5.10	7.5.11
Medium	UBUNTU-CVE-2026-27135	nghttp2@1.59.0-1ubuntu0.2	1.59.0-1ubuntu0.3
Medium	UBUNTU-CVE-2026-43465	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-53224	linux@6.8.0-88.89	6.8.0-138.138
Medium	UBUNTU-CVE-2026-23231	linux@6.8.0-88.89	6.8.0-111.111
Medium	UBUNTU-CVE-2026-46043	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-53043	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-53186	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63992	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64551	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-90414	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-68343	linux@6.8.0-88.89	6.8.0-147.147
Medium	ALPINE-CVE-2026-63072	openssl@3.3.5-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-63072	openssl@3.0.11-1~deb12u2	3.0.22-1~deb12u1
Medium	UBUNTU-CVE-2026-64400	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43037	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2020-26556	linux@6.8.0-88.89	no fix listed
Medium	BIT-redis-2025-46819	Redis (TM)@7.2.4-4	6.2.20
Medium	BIT-redis-2025-46819	redis@7.2.4-4	6.2.20
Medium	UBUNTU-CVE-2026-80587	linux@6.8.0-88.89	no fix listed
Medium	ALPINE-CVE-2025-69420	openssl@3.3.5-r0	3.3.6-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.