dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-33192	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-66036	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm11
Low	GHSA-rgw5-rvv9-x895	brace-expansion@2.0.1	2.1.4
Low	GO-2025-4006	stdlib@go1.23.3	1.24.8
Low	UBUNTU-CVE-2026-72149	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-31408	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-46212	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-80601	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2025-40048	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2025-1369	linux@6.8.0-88.89	no fix listed
Low	GHSA-mh99-v99m-4gvg	brace-expansion@2.0.1	2.1.3
Low	UBUNTU-CVE-2026-74411	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-93042	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-43048	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72029	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72334	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-37926	linux@6.8.0-88.89	6.8.0-117.117
Low	GHSA-r4q5-vmmm-2653	follow-redirects@1.15.11	1.16.0
Low	UBUNTU-CVE-2025-40187	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-31676	linux@6.8.0-88.89	6.8.0-124.124
Low	BIT-postgresql-2026-6477	postgresql@16.3.0-3	14.23.0
Low	BIT-postgresql-2026-6477	PostgreSQL@16.3.0-3	14.23.0
Low	UBUNTU-CVE-2026-15308	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.17
Low	UBUNTU-CVE-2026-35385	openssh@1:9.6p1-3ubuntu13.14	1:9.6p1-3ubuntu13.16
Low	UBUNTU-CVE-2021-3864	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90176	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2023-6240	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2026-82560	perl@5.36.0-7+deb12u1	no fix listed
Low	UBUNTU-CVE-2026-31638	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43245	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43345	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-72373	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74435	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80637	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2025-40053	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2025-40337	linux@6.8.0-88.89	6.8.0-106.106
Low	DEBIAN-CVE-2023-45322	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	UBUNTU-CVE-2025-52194	libsndfile@1.2.2-1ubuntu5.24.04.1	no fix listed
Low	GHSA-vq4v-j7r6-jq4m	pnpm@10.22.0	10.34.5
Low	UBUNTU-CVE-2025-40183	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-68376	linux@6.8.0-88.89	6.8.0-147.147
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.38.0	0.52.0
Low	GHSA-89xv-2m56-2m9x	next@15.5.7	15.5.21
Low	UBUNTU-CVE-2026-4775	tiff@4.5.1+git230720-4ubuntu2.4	no fix listed
Low	DEBIAN-CVE-2026-54874	openssl@3.0.11-1~deb12u2	3.0.22-1~deb12u1
Low	UBUNTU-CVE-2026-72330	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89647	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-2176	zvbi@0.2.42-2	0.2.42-2ubuntu0.24.04.1~esm1
Low	GO-2026-4870	stdlib@go1.23.3	1.25.9
Low	DEBIAN-CVE-2026-41992	gzip@1.12-1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.