dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	DEBIAN-CVE-2026-42010	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2025-38501	linux@6.8.0-88.89	6.8.0-100.100
Medium	DEBIAN-CVE-2023-2953	openldap@2.5.13+dfsg-5	no fix listed
Medium	UBUNTU-CVE-2020-26146	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2023-31484	perl@5.36.0-7+deb12u1	5.36.0-7+deb12u3
Medium	DEBIAN-CVE-2025-32988	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u5
Medium	UBUNTU-CVE-2026-74478	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-43186	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2019-20426	linux@6.8.0-88.89	no fix listed
Medium	GHSA-9jj7-4m8r-rfcm	github.com/jackc/pgx/v5@v5.5.5	5.9.0
Medium	GHSA-xgrm-4fwx-7qm8	github.com/jackc/pgx/v5@v5.5.5	5.9.0
Medium	UBUNTU-CVE-2020-26140	linux@6.8.0-88.89	no fix listed
Medium	ALPINE-CVE-2026-34182	openssl@3.3.5-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-34182	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
Medium	UBUNTU-CVE-2026-31669	linux@6.8.0-88.89	6.8.0-134.134
Medium	BIT-postgresql-2026-2006	postgresql@16.3.0-3	14.21.0
Medium	BIT-postgresql-2026-2006	PostgreSQL@16.3.0-3	14.21.0
Medium	UBUNTU-CVE-2014-5271	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Medium	GHSA-5rq4-664w-9x2c	basic-ftp@5.0.5	5.2.0
Medium	DEBIAN-CVE-2024-34459	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u2
Medium	UBUNTU-CVE-2026-89970	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2022-0856	libcaca@0.99.beta20-4build2	0.99.beta20-4ubuntu0.1
Medium	UBUNTU-CVE-2026-74279	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74280	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72194	linux@6.8.0-88.89	6.8.0-147.147
Medium	DEBIAN-CVE-2018-6829	libgcrypt20@1.10.1-3	no fix listed
Medium	UBUNTU-CVE-2026-72033	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2022-0400	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2024-56180	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-63887	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63888	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-43341	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-68160	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-3497	openssh@1:9.6p1-3ubuntu13.14	1:9.6p1-3ubuntu13.15
Medium	UBUNTU-CVE-2026-72041	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72226	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72319	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74427	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80630	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72130	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-8461	ffmpeg@7:6.1.1-3ubuntu5	no fix listed
Medium	UBUNTU-CVE-2026-68159	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-72084	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72299	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72339	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72351	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2025-57052	cjson@1.7.17-1	1.7.17-1ubuntu0.1~esm3
Medium	DEBIAN-CVE-2024-33599	glibc@2.36-9+deb12u6	2.36-9+deb12u7
Medium	UBUNTU-CVE-2026-90151	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31478	linux@6.8.0-88.89	6.8.0-134.134

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.