dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-28387	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	UBUNTU-CVE-2026-93228	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2015-9019	libxslt@1.1.35-1	no fix listed
Medium	UBUNTU-CVE-2026-11940	python3.12@3.12.3-1ubuntu0.9	no fix listed
Medium	BIT-gdal-2026-4738	GDAL@3.9.0	3.11.0
Medium	GHSA-492v-c6pp-mqqv	next@15.5.7	15.5.16
Medium	UBUNTU-CVE-2026-74341	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-64392	linux@6.8.0-88.89	6.8.0-147.147
Medium	GO-2026-4601	stdlib@go1.23.3	1.25.8
Medium	UBUNTU-CVE-2024-52005	git@1:2.43.0-1ubuntu7.3	no fix listed
Medium	UBUNTU-CVE-2026-63801	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2020-26557	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31417	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2025-37928	linux@6.8.0-88.89	6.8.0-100.100
Medium	UBUNTU-CVE-2026-43452	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-80589	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89968	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43071	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-43117	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-98171	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2025-68745	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-90230	linux@6.8.0-88.89	no fix listed
Medium	GO-2026-4981	stdlib@go1.23.3	1.25.10
Medium	UBUNTU-CVE-2026-89665	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-72310	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2025-38488	linux@6.8.0-88.89	6.8.0-100.100
Medium	UBUNTU-CVE-2026-31611	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-68426	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2025-40099	linux@6.8.0-88.89	6.8.0-106.106
Medium	GHSA-34x7-hfp2-rc4v	tar@6.2.0	7.5.7
Medium	UBUNTU-CVE-2026-31563	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-43057	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-46102	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-46177	linux@6.8.0-88.89	6.8.0-136.136
Medium	ALPINE-CVE-2026-28389	openssl@3.3.5-r0	3.3.7-r0
Medium	ALPINE-CVE-2026-28390	openssl@3.3.5-r0	3.3.7-r0
Medium	DEBIAN-CVE-2026-28389	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	DEBIAN-CVE-2026-28390	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Medium	UBUNTU-CVE-2019-14899	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89586	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64835	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Medium	UBUNTU-CVE-2026-64597	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2018-1000520	mbedtls@2.28.8-1	no fix listed
Low	GO-2026-4977	stdlib@go1.23.3	1.25.10
Low	DEBIAN-CVE-2026-57433	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-43466	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-14164	libarchive@3.7.2-2ubuntu0.5	3.7.2-2ubuntu0.8
Low	DEBIAN-CVE-2026-6653	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	UBUNTU-CVE-2026-19445	python3.12@3.12.3-1ubuntu0.9	no fix listed
Low	GHSA-w5vr-8v7q-w6rv	baseline-browser-mapping@2.8.18	2.11.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.