dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-43464	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-98130	linux@6.8.0-88.89	no fix listed
Low	BIT-postgresql-2026-6478	postgresql@16.3.0-3	14.23.0
Low	BIT-postgresql-2026-6478	PostgreSQL@16.3.0-3	14.23.0
Low	UBUNTU-CVE-2026-30999	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-64834	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2026-74521	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-68097	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-90018	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-64534	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2017-7475	cairo@1.18.0-3build1	no fix listed
Low	UBUNTU-CVE-2026-68124	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89861	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-53198	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-45843	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-77214	expat@2.6.1-2ubuntu0.3	no fix listed
Low	UBUNTU-CVE-2026-98069	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-31552	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43099	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43226	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-43230	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-43373	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46027	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-53003	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-72374	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72378	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72409	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72418	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72502	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74321	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80646	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-46125	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2025-68206	linux@6.8.0-88.89	6.8.0-110.110
Low	UBUNTU-CVE-2025-68349	linux@6.8.0-88.89	6.8.0-110.110
Low	UBUNTU-CVE-2026-93107	linux@6.8.0-88.89	no fix listed
Low	ALPINE-CVE-2026-9076	openssl@3.3.5-r0	3.3.7-r1
Low	DEBIAN-CVE-2026-9076	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Low	UBUNTU-CVE-2026-89511	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89549	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89547	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-4111	libarchive@3.7.2-2ubuntu0.5	3.7.2-2ubuntu0.6
Low	BIT-postgresql-2026-14664	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14664	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14670	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14670	postgresql@16.3.0-3	14.24.0
Low	ALPINE-CVE-2026-45445	openssl@3.3.5-r0	3.3.7-r1
Low	DEBIAN-CVE-2026-45445	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Low	UBUNTU-CVE-2026-64396	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-64437	linux@6.8.0-88.89	6.8.0-147.147
Low	DEBIAN-CVE-2023-39615	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.