dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 21 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,326 findings — 14 critical, 15 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

84,02314157738,519

9,326 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139214	3,065
langgenius/dify-sandbox	0.2.12	0027143	2,012
langgenius/dify-plugin-daemon	0.5.1-local	555457,598	69,311
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4482311	5,049
bitnamilegacy/redis	7.2.4-debian-12-r13	4580253	4,586

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,660 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-5942	golang.org/x/net@v0.40.0	0.56.0
Low	UBUNTU-CVE-2026-68100	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-89844	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-56209	aom@3.8.2-2ubuntu0.1	3.8.2-2ubuntu0.2
Low	UBUNTU-CVE-2026-58016	glib2.0@2.80.0-6ubuntu3.5	2.80.0-6ubuntu3.9
Low	UBUNTU-CVE-2025-68803	linux@6.8.0-88.89	6.8.0-117.117
Low	UBUNTU-CVE-2026-63946	linux@6.8.0-88.89	6.8.0-146.146
Low	DEBIAN-CVE-2026-0861	glibc@2.36-9+deb12u7	2.36-9+deb12u14
Low	ALPINE-CVE-2026-31789	openssl@3.3.5-r0	3.3.7-r0
Low	DEBIAN-CVE-2026-31789	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
Low	GHSA-rpmf-866q-6p89	basic-ftp@5.0.5	5.3.1
Low	UBUNTU-CVE-2026-64832	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm13
Low	UBUNTU-CVE-2025-39841	linux@6.8.0-88.89	6.8.0-106.106
Low	GHSA-2883-xcg3-v3hh	js-yaml@4.1.1	4.3.2
Low	UBUNTU-CVE-2026-31467	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-43469	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-63944	linux@6.8.0-88.89	6.8.0-146.146
Low	UBUNTU-CVE-2026-89860	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-38146	linux@6.8.0-88.89	6.8.0-100.100
Low	DEBIAN-CVE-2025-6297	dpkg@1.21.22	1.21.23
Low	UBUNTU-CVE-2026-33164	libde265@1.0.15-1build3	1.0.15-1ubuntu0.1
Low	UBUNTU-CVE-2025-68818	linux@6.8.0-88.89	6.8.0-110.110
Low	UBUNTU-CVE-2026-68096	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-52981	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-72148	linux@6.8.0-88.89	6.8.0-147.147
Low	GHSA-r292-9mhp-454m	tar@6.2.0	7.5.21
Low	GHSA-r28c-9q8g-f849	postcss@8.4.31	8.5.18
Low	UBUNTU-CVE-2026-98257	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2025-40168	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-53392	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-53397	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2025-40347	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2025-68218	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2025-68283	linux@6.8.0-88.89	6.8.0-106.106
Low	UBUNTU-CVE-2026-46031	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-31393	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-31464	linux@6.8.0-88.89	6.8.0-136.136
Low	UBUNTU-CVE-2026-74340	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-74410	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-80599	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-25833	mbedtls@2.28.8-1	no fix listed
Low	UBUNTU-CVE-2026-89704	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-89706	linux@6.8.0-88.89	no fix listed
Low	UBUNTU-CVE-2026-64600	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-64368	linux@6.8.0-88.89	6.8.0-147.147
Low	UBUNTU-CVE-2026-52929	linux@6.8.0-88.89	6.8.0-146.146
Low	GHSA-qffp-2rhf-9h96	tar@6.2.0	7.5.10
Low	GHSA-qrv3-253h-g69c	pnpm@10.22.0	10.34.4
Low	BIT-postgresql-2026-6475	postgresql@16.3.0-3	14.23.0
Low	BIT-postgresql-2026-6475	PostgreSQL@16.3.0-3	14.23.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14157738,519	84,023

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.