dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-89709	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90301	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-7210	python3.12@3.12.3-1ubuntu0.9	no fix listed
Low	GHSA-mwp4-54f8-5fhr	ip-address@9.0.5	10.3.1
Low	BIT-redis-2025-46818	Redis (TM)@7.2.4-4	6.2.20
Low	BIT-redis-2025-46818	redis@7.2.4-4	6.2.20
Low	UBUNTU-CVE-2026-64138	linux@6.8.0-88.89	6.8.0-139.139
Low	UBUNTU-CVE-2026-89863	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90067	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90228	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-93151	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-97523	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-68098	linux@6.8.0-88.89	6.8.0-147.147
Low	DEBIAN-CVE-2026-12087	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	GO-2025-4116	golang.org/x/crypto@v0.38.0	0.43.0
Low	DEBIAN-CVE-2025-4802	glibc@2.36-9+deb12u7	2.36-9+deb12u11
Low	UBUNTU-CVE-2026-31570	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43113	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46198	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46238	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-74408	linux@6.8.0-88.89	6.8.0-147.147
Low	GHSA-v56q-mh7h-f735	immutable@5.1.4	5.1.8
Low	UBUNTU-CVE-2026-63968	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-53383	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-46266	linux@6.8.0-88.89	6.8.0-134.134
Low	DEBIAN-CVE-2026-4046	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	GO-2025-4009	stdlib@go1.23.3	1.24.8
Low	UBUNTU-CVE-2026-43215	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2025-40158	linux@6.8.0-88.89	no fix listed
Low	BIT-redis-2024-31228	Redis (TM)@7.2.4-4	6.2.16
Low	BIT-redis-2024-31228	redis@7.2.4-4	6.2.16
Low	GHSA-73wf-gq98-2v4g	browserslist@4.26.3	4.28.7
Low	UBUNTU-CVE-2026-89848	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-68192	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-5773	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.9
Low	UBUNTU-CVE-2025-38561	linux@6.8.0-88.89	6.8.0-94.96
Low	GHSA-c83g-rgw3-j3cx	browserslist@4.26.3	4.28.7
Low	UBUNTU-CVE-2026-89528	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-97557	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-68431	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2026-54411	pam@1.5.2-6+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-23457	linux@6.8.0-88.89	6.8.0-136.136
Low	GHSA-78h2-9frx-2jm8	github.com/go-jose/go-jose/v4@v4.0.5	4.1.4
Low	UBUNTU-CVE-2026-30998	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Low	UBUNTU-CVE-2026-89680	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-43018	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-74300	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80635	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89774	linux@6.8.0-88.89	6.8.0-147.147
Low	DEBIAN-CVE-2026-74860	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.