dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.38.0	0.52.0
Low	GO-2026-4971	stdlib@go1.23.3	1.25.10
Low	UBUNTU-CVE-2025-68360	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2023-3640	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2026-0915	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	UBUNTU-CVE-2026-68199	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80585	linux@6.8.0-88.89	no fix listed
Low	GO-2026-4947	stdlib@go1.23.3	1.25.9
Low	UBUNTU-CVE-2026-43249	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-72469	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80935	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80937	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-45859	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-72254	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89657	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89707	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-38566	linux@6.8.0-88.89	6.8.0-100.100
Low	UBUNTU-CVE-2025-37879	linux@6.8.0-88.89	6.8.0-100.100
Low	DEBIAN-CVE-2026-48959	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u4
Low	UBUNTU-CVE-2026-43101	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-52956	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72203	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74374	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80631	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89648	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90234	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-7774	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	GHSA-6g55-p6wh-862q	postcss@8.4.31	8.5.12
Low	GHSA-7r86-cg39-jmmj	minimatch@9.0.3	9.0.7
Low	UBUNTU-CVE-2025-38052	linux@6.8.0-88.89	6.8.0-100.100
Low	UBUNTU-CVE-2026-43172	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72380	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74407	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-74530	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80692	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-80721	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90367	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90379	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-43190	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-43233	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-64448	linux@6.8.0-88.89	6.8.0-147.147
Low	GHSA-f5x3-32g6-xq36	tar@6.2.0	6.2.1
Low	UBUNTU-CVE-2026-98056	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90153	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-32882	libheif@1.17.6-1ubuntu4.1	1.17.6-1ubuntu4.4
Low	UBUNTU-CVE-2025-40240	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-98070	linux@6.8.0-88.89	no fix listed
Low	BIT-postgresql-2026-6637	postgresql@16.3.0-3	14.23.0
Low	BIT-postgresql-2026-6637	PostgreSQL@16.3.0-3	14.23.0
Low	UBUNTU-CVE-2025-68255	linux@6.8.0-88.89	6.8.0-110.110

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.