dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	UBUNTU-CVE-2026-98239	linux@6.8.0-88.89	no fix listed
Low	BIT-postgresql-2026-6479	postgresql@16.3.0-3	14.23.0
Low	BIT-postgresql-2026-6479	PostgreSQL@16.3.0-3	14.23.0
Low	UBUNTU-CVE-2026-89544	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-53390	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-64389	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90149	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-2177	zvbi@0.2.42-2	0.2.42-2ubuntu0.24.04.1~esm1
Low	DEBIAN-CVE-2024-33600	glibc@2.36-9+deb12u6	2.36-9+deb12u7
Low	ALPINE-CVE-2025-69419	openssl@3.3.5-r0	3.3.6-r0
Low	DEBIAN-CVE-2025-69419	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
Low	UBUNTU-CVE-2025-40342	linux@6.8.0-88.89	6.8.0-106.106
Low	GO-2026-5037	stdlib@go1.23.3	1.25.11
Low	UBUNTU-CVE-2026-89632	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2025-32415	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Low	GHSA-qw64-3x98-g7q2	github.com/go-git/go-billy/v5@v5.6.2	5.9.0
Low	UBUNTU-CVE-2025-69534	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2025-40204	linux@6.8.0-88.89	6.8.0-106.106
Low	GHSA-q2x7-8rv6-6q7h	jinja2@3.0.3	3.1.5
Low	UBUNTU-CVE-2025-68774	linux@6.8.0-88.89	6.8.0-110.110
Low	GHSA-52cp-r559-cp3m	js-yaml@4.1.1	4.3.0
Low	UBUNTU-CVE-2026-64398	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-23111	linux@6.8.0-88.89	6.8.0-107.107
Low	UBUNTU-CVE-2026-31629	linux@6.8.0-88.89	6.8.0-136.136
Low	GHSA-23hp-3jrh-7fpw	tar@6.2.0	7.5.19
Low	UBUNTU-CVE-2026-31612	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43184	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-52998	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-64380	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74704	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89711	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-53217	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-64545	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2018-1121	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-64577	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74697	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-46133	linux@6.8.0-88.89	6.8.0-136.136
Low	BIT-postgresql-2026-18408	postgresql@16.3.0-3	14.24.0
Low	BIT-postgresql-2026-18408	PostgreSQL@16.3.0-3	14.24.0
Low	UBUNTU-CVE-2026-89729	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-63915	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-63916	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-64313	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-64364	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-64382	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72121	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72124	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89626	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89849	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89483	linux@6.8.0-88.89	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.