dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6603	golang.org/x/net@v0.40.0	0.60.0
Low	GO-2026-6603	stdlib@go1.23.3	1.26.9
Low	GHSA-ch52-4w7c-c8xp	http-cache-semantics@4.1.1	no fix listed
Low	UBUNTU-CVE-2026-43112	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-68470	linux@6.8.0-88.89	no fix listed
Low	GO-2026-5972	stdlib@go1.23.3	1.25.13
Low	GO-2026-6088	stdlib@go1.23.3	1.25.13
Low	GO-2026-6089	stdlib@go1.23.3	1.25.13
Low	GO-2026-6090	stdlib@go1.23.3	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.40.0	0.60.0
Low	GO-2026-6611	stdlib@go1.23.3	1.26.9
Low	UBUNTU-CVE-2025-40129	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-64560	linux@6.8.0-88.89	6.8.0-147.147
Low	GHSA-wf93-45jw-7689	pip@23.0.1	26.1.2
Low	UBUNTU-CVE-2026-8643	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed
Low	UBUNTU-CVE-2026-43139	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-90000	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-38191	linux@6.8.0-88.89	6.8.0-100.100
Low	GHSA-p9j2-gv94-2wf4	next@15.5.7	15.5.21
Low	UBUNTU-CVE-2024-2193	linux@6.8.0-88.89	no fix listed
Low	GO-2026-5038	stdlib@go1.23.3	1.25.11
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.4.0	2.8.0
Low	UBUNTU-CVE-2026-68196	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-68352	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-9669	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.15
Low	UBUNTU-CVE-2025-27558	linux@6.8.0-88.89	6.8.0-100.100
Low	UBUNTU-CVE-2026-63947	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-64093	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2024-50106	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72157	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89951	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-72233	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-72235	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89569	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90329	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-98261	linux@6.8.0-88.89	no fix listed
Low	DEBIAN-CVE-2024-2236	libgcrypt20@1.10.1-3	no fix listed
Low	UBUNTU-CVE-2026-43291	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-80989	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-31711	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43203	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2026-43296	linux@6.8.0-88.89	6.8.0-134.134
Low	UBUNTU-CVE-2025-68261	linux@6.8.0-88.89	6.8.0-110.110
Low	UBUNTU-CVE-2025-68337	linux@6.8.0-88.89	6.8.0-110.110
Low	UBUNTU-CVE-2017-13716	binutils@2.42-4ubuntu2.7	no fix listed
Low	GHSA-82r6-8w77-94w6	anyio@4.9.0	4.14.2
Low	UBUNTU-CVE-2026-90255	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-90357	linux@6.8.0-88.89	no fix listed
Low	GO-2026-6218	stdlib@go1.23.3	1.25.13
Low	UBUNTU-CVE-2026-90256	linux@6.8.0-88.89	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.