dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-89637	linux@6.8.0-88.89	no fix listed
Medium	DSA-5936-1	libfile-find-rule-perl@0.34-3	0.34-4~deb12u1
Medium	UBUNTU-CVE-2026-74480	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-53221	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-53228	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2025-37778	linux@6.8.0-88.89	6.8.0-100.100
Medium	UBUNTU-CVE-2026-23450	linux@6.8.0-88.89	6.8.0-134.134
Medium	UBUNTU-CVE-2026-43406	linux@6.8.0-88.89	6.8.0-134.134
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.38.0	0.52.0
Medium	UBUNTU-CVE-2026-64269	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89846	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-63913	linux@6.8.0-88.89	6.8.0-146.146
Medium	UBUNTU-CVE-2023-45929	slang2@2.3.3-3build2	no fix listed
Medium	UBUNTU-CVE-2026-33064	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64541	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2025-40261	linux@6.8.0-88.89	6.8.0-106.106
Medium	DEBIAN-CVE-2024-0727	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1
Medium	UBUNTU-CVE-2026-68457	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-98323	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-31450	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2026-89779	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89786	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89697	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89634	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2026-5260	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2026-64160	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80668	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89788	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64056	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2026-64089	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2026-64125	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2026-68123	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74737	linux@6.8.0-88.89	no fix listed
Medium	BIT-postgresql-2025-8714	postgresql@16.3.0-3	13.22.0
Medium	BIT-postgresql-2025-8714	PostgreSQL@16.3.0-3	13.22.0
Medium	UBUNTU-CVE-2026-31405	linux@6.8.0-88.89	6.8.0-136.136
Medium	UBUNTU-CVE-2025-40350	linux@6.8.0-88.89	6.8.0-106.106
Medium	UBUNTU-CVE-2025-68775	linux@6.8.0-88.89	6.8.0-110.110
Medium	USN-8156-1	gdk-pixbuf@2.42.10+dfsg-3ubuntu3.2	2.42.10+dfsg-3ubuntu3.3
Medium	UBUNTU-CVE-2026-64535	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2024-35367	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm5
Medium	UBUNTU-CVE-2026-53398	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-53399	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74597	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89649	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-90110	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74394	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-68136	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-80670	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-52982	linux@6.8.0-88.89	6.8.0-136.136

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.