dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-63909	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2021-3714	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-43495	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-89631	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-68083	linux@6.8.0-88.89	6.8.0-147.147
Low	GO-2026-4986	stdlib@go1.23.3	1.25.10
Low	UBUNTU-CVE-2026-89973	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89554	linux@6.8.0-88.89	no fix listed
Low	GO-2026-4918	golang.org/x/net@v0.40.0	0.53.0
Low	GO-2026-4918	stdlib@go1.23.3	1.25.10
Low	UBUNTU-CVE-2026-63796	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-46325	linux@6.8.0-88.89	6.8.0-137.137
Low	UBUNTU-CVE-2026-43365	linux@6.8.0-88.89	6.8.0-136.136
Low	DEBIAN-CVE-2026-13221	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-72021	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72035	linux@6.8.0-88.89	6.8.0-147.147
Low	DEBIAN-CVE-2026-42496	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-64025	linux@6.8.0-88.89	6.8.0-139.139
Low	GHSA-q3j6-qgpj-74h6	fast-uri@3.1.0	3.1.1
Low	UBUNTU-CVE-2026-72057	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2025-10263	linux@6.8.0-88.89	6.8.0-142.142
Low	GHSA-mg66-mrh9-m8jx	next@15.5.7	15.5.16
Low	UBUNTU-CVE-2026-31685	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-43194	linux@6.8.0-88.89	6.8.0-134.134
Low	GHSA-267c-6grr-h53f	next@15.5.7	15.5.16
Low	GHSA-26hh-7cqf-hhc6	next@15.5.7	15.5.18
Low	GHSA-36qx-fr4f-26g5	next@15.5.7	15.5.16
Low	UBUNTU-CVE-2026-64394	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-43158	linux@6.8.0-88.89	6.8.0-134.134
Low	GHSA-vfj7-8cjw-p6xm	braces@3.0.3	no fix listed
Low	UBUNTU-CVE-2026-64390	linux@6.8.0-88.89	6.8.0-147.147
Low	DSA-5902-1	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u2
Low	BIT-postgresql-2026-15741	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-15741	postgresql@16.3.0-3	14.24.0
Low	UBUNTU-CVE-2026-89696	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-34873	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-97573	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-58049	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2025-40328	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-56211	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	BIT-postgresql-2026-14662	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14662	PostgreSQL@16.3.0-3	14.24.0
Low	UBUNTU-CVE-2026-66046	expat@2.6.1-2ubuntu0.3	2.6.1-2ubuntu0.6
Low	DEBIAN-CVE-2026-42013	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Low	UBUNTU-CVE-2026-46303	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-74490	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89663	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-37947	linux@6.8.0-88.89	6.8.0-100.100
Low	UBUNTU-CVE-2026-31622	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2020-26142	linux@6.8.0-88.89	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.