dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-4224	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2026-43405	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46024	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46110	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-67215	cjson@1.7.17-1	no fix listed
Low	UBUNTU-CVE-2026-45860	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-68155	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-68157	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72242	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72247	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72253	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74282	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89476	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90102	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90103	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-63830	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2025-68782	linux@6.8.0-88.89	6.8.0-110.110
Low	BIT-postgresql-2025-8715	postgresql@16.3.0-3	13.22.0
Low	BIT-postgresql-2025-8715	PostgreSQL@16.3.0-3	13.22.0
Low	BIT-postgresql-2026-19385	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-19385	PostgreSQL@16.3.0-3	14.24.0
Low	UBUNTU-CVE-2024-25269	libheif@1.17.6-1ubuntu4.1	1.17.6-1ubuntu4.2
Low	UBUNTU-CVE-2025-40273	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-90293	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-97524	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-31477	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43441	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46265	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-23456	linux@6.8.0-88.89	6.8.0-136.136
Low	BIT-postgresql-2026-14671	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14671	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14677	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14677	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14680	PostgreSQL@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-14680	postgresql@16.3.0-3	14.24.0
Low	UBUNTU-CVE-2025-66418	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm1
Low	UBUNTU-CVE-2023-1193	linux@6.8.0-88.89	no fix listed
Low	GHSA-3x4c-7xq6-9pq8	next@15.5.7	15.5.14
Low	UBUNTU-CVE-2026-74281	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-53086	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-72231	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-90294	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2023-50495	ncurses@6.4-4	no fix listed
Low	GHSA-v39h-62p7-jpjc	fast-uri@3.1.0	3.1.2
Low	UBUNTU-CVE-2026-46195	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-68287	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72464	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2024-31755	cjson@1.7.17-1	1.7.17-1ubuntu0.1~esm2
Low	UBUNTU-CVE-2026-1788	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89682	linux@6.8.0-88.89	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.