dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2025-69420	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Medium	UBUNTU-CVE-2026-72493	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89532	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89650	linux@6.8.0-88.89	no fix listed
Medium	BIT-postgresql-2026-15742	postgresql@16.3.0-3	14.24.0
Medium	BIT-postgresql-2026-15742	PostgreSQL@16.3.0-3	14.24.0
Medium	UBUNTU-CVE-2026-80945	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89671	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-8927	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Medium	UBUNTU-CVE-2026-31657	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-52931	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-53088	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-53309	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-68082	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74436	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74556	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80586	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31705	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-43499	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-46135	linux@6.8.0-88.89	6.8.0-134.134
Medium	ALPINE-CVE-2026-28388	openssl@3.3.5-r0	3.3.7-r0
Medium	DEBIAN-CVE-2026-28388	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	GHSA-mf9v-mfxr-j63j	urllib3@2.6.1	2.7.0
Medium	UBUNTU-CVE-2026-44432	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Medium	UBUNTU-CVE-2026-74476	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2019-1010025	glibc@2.36-9+deb12u7	no fix listed
Medium	UBUNTU-CVE-2026-43383	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-80590	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2025-40135	linux@6.8.0-88.89	6.8.0-136.136
Medium	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.38.0	0.52.0
Medium	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.38.0	0.52.0
Medium	GHSA-3xgq-45jj-v275	cross-spawn@7.0.3	7.0.5
Medium	UBUNTU-CVE-2026-31682	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-63976	linux@6.8.0-88.89	6.8.0-146.146
Medium	UBUNTU-CVE-2026-53049	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-74569	linux@6.8.0-88.89	no fix listed
Medium	BIT-redis-2025-21605	Redis (TM)@7.2.4-4	6.2.18
Medium	BIT-redis-2025-21605	redis@7.2.4-4	6.2.18
Medium	DEBIAN-CVE-2026-3833	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2026-53131	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64393	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-43197	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-98365	linux@6.8.0-88.89	no fix listed
Medium	GHSA-hwx4-2j3j-g496	pnpm@10.22.0	10.34.0
Medium	UBUNTU-CVE-2024-7055	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Medium	UBUNTU-CVE-2026-52924	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-30754	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm15
Medium	UBUNTU-CVE-2026-97555	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64136	linux@6.8.0-88.89	6.8.0-139.139
Medium	ALPINE-CVE-2026-28387	openssl@3.3.5-r0	3.3.7-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.