dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-43304	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-72192	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72466	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80609	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72234	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80600	linux@6.8.0-88.89	6.8.0-147.147
Medium	GHSA-379q-355j-w6rj	pnpm@10.22.0	10.26.0
Medium	GO-2026-4337	stdlib@go1.23.3	1.24.13
Medium	UBUNTU-CVE-2025-13836	python3.12@3.12.3-1ubuntu0.9	3.12.3-1ubuntu0.10
Medium	BIT-redis-2026-23479	Redis (TM)@7.2.4-4	7.2.14
Medium	BIT-redis-2026-23479	redis@7.2.4-4	7.2.14
Medium	BIT-postgresql-2026-6473	postgresql@16.3.0-3	14.23.0
Medium	BIT-postgresql-2026-6473	PostgreSQL@16.3.0-3	14.23.0
Medium	UBUNTU-CVE-2026-72065	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72069	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-31533	linux@6.8.0-88.89	6.8.0-117.117
Medium	UBUNTU-CVE-2026-34877	mbedtls@2.28.8-1	no fix listed
Medium	UBUNTU-CVE-2026-43503	linux@6.8.0-88.89	6.8.0-124.124
Medium	UBUNTU-CVE-2026-72083	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72322	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72323	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72491	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72014	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72398	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-72473	linux@6.8.0-88.89	6.8.0-147.147
Medium	ALPINE-CVE-2026-63076	openssl@3.3.5-r0	3.3.7-r1
Medium	DEBIAN-CVE-2026-63076	openssl@3.0.11-1~deb12u2	3.0.22-1~deb12u1
Medium	DEBIAN-CVE-2026-5450	glibc@2.36-9+deb12u7	no fix listed
Medium	UBUNTU-CVE-2026-53046	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-72422	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-63912	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63922	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-63924	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-64268	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68154	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68158	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68476	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68477	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72020	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72129	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-72251	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74267	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74268	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80976	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89482	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89485	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89494	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89495	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89538	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89643	linux@6.8.0-88.89	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.