dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GO-2024-2887	stdlib@go1.21.9	1.21.11
Medium	BIT-redis-2026-25243	redis@7.2.4-4	6.2.22
Medium	BIT-redis-2026-25243	Redis (TM)@7.2.4-4	6.2.22
Medium	UBUNTU-CVE-2025-47917	mbedtls@2.28.8-1	2.28.8-1ubuntu0.1~esm1
Medium	UBUNTU-CVE-2025-39946	linux@6.8.0-88.89	6.8.0-100.100
Medium	UBUNTU-CVE-2019-19814	linux@6.8.0-88.89	no fix listed
Medium	GHSA-p293-qw3h-jr36	next@15.5.7	15.5.24
Medium	GHSA-wf6x-7x77-mvgw	immutable@5.1.4	5.1.5
Medium	UBUNTU-CVE-2020-15802	linux@6.8.0-88.89	no fix listed
Medium	GHSA-r5fr-rjxr-66jc	lodash@4.17.21	4.18.0
Medium	BIT-redis-2023-41056	Redis (TM)@7.2.4-4	7.0.15
Medium	BIT-redis-2023-41056	redis@7.2.4-4	7.0.15
Medium	UBUNTU-CVE-2026-5121	libarchive@3.7.2-2ubuntu0.5	3.7.2-2ubuntu0.7
Medium	UBUNTU-CVE-2026-64564	linux@6.8.0-88.89	6.8.0-147.147
Medium	GHSA-cx63-2mw6-8hw5	setuptools@65.5.1	70.0.0
Medium	GHSA-5j98-mcp5-4vw2	glob@10.3.10	10.5.0
Medium	DEBIAN-CVE-2017-11164	pcre3@2:8.39-15	no fix listed
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.72.0	1.79.3
Medium	UBUNTU-CVE-2026-43500	linux@6.8.0-88.89	6.8.0-124.124
Medium	DEBIAN-CVE-2024-4741	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1
Medium	DEBIAN-CVE-2017-7246	pcre3@2:8.39-15	no fix listed
Medium	GHSA-38jv-5279-wg99	urllib3@2.4.0	2.6.3
Medium	UBUNTU-CVE-2026-21441	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Medium	GHSA-c4j6-fc7j-m34r	next@15.5.7	15.5.16
Medium	DEBIAN-CVE-2025-49796	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Medium	DEBIAN-CVE-2019-20838	pcre3@2:8.39-15	no fix listed
Medium	UBUNTU-CVE-2026-46300	linux@6.8.0-88.89	6.8.0-124.124
Medium	UBUNTU-CVE-2020-26143	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2017-7245	pcre3@2:8.39-15	no fix listed
Medium	UBUNTU-CVE-2019-19378	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2024-56171	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	PYSEC-2025-49	setuptools@65.5.1	78.1.1
Medium	BIT-postgresql-2024-7348	postgresql@16.3.0-3	12.20.0
Medium	BIT-postgresql-2024-7348	PostgreSQL@16.3.0-3	12.20.0
Medium	UBUNTU-CVE-2023-49502	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm1
Medium	DEBIAN-CVE-2019-9192	glibc@2.36-9+deb12u7	no fix listed
Medium	UBUNTU-CVE-2026-8925	curl@8.5.0-2ubuntu10.6	8.5.0-2ubuntu10.10
Medium	UBUNTU-CVE-2026-23455	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-74469	linux@6.8.0-88.89	no fix listed
Medium	GO-2026-4341	stdlib@go1.23.3	1.24.12
Medium	GHSA-9c88-49p5-5ggf	systeminformation@5.27.12	5.30.8
Medium	GHSA-5vv4-hvf7-2h46	systeminformation@5.27.12	5.31.0
Medium	BIT-postgresql-2026-2005	postgresql@16.3.0-3	14.21.0
Medium	BIT-postgresql-2026-2005	PostgreSQL@16.3.0-3	14.21.0
Medium	DEBIAN-CVE-2023-31486	perl@5.36.0-7+deb12u1	no fix listed
Medium	BIT-redis-2025-27151	redis@7.2.4-4	7.2.9
Medium	BIT-redis-2025-27151	Redis (TM)@7.2.4-4	7.2.9
Medium	UBUNTU-CVE-2016-20013	glibc@2.39-0ubuntu8.6	no fix listed
Medium	BIT-postgresql-2026-2004	PostgreSQL@16.3.0-3	14.21.0
Medium	BIT-postgresql-2026-2004	postgresql@16.3.0-3	14.21.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.