dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

douban

Scored 20 Oct 2026

A Helm chart for Dify

Latest 0.10.0 3 months agodeploys tag 1.10.1-fix.1 15Artifact Hub

dify 0.10.0 deploys 6 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, langgenius/dify-plugin-daemon and 2 more. Across the 5 measured, 9,440 findings — 14 critical, 16 high — 7 on CISA KEV. The highest contribution is BIT-redis-2025-49844 in Redis (TM) 7.2.4-4, fixed in 6.2.20.

Radar Score

85,40814167808,628

9,440 findings over 5 of 6 images measured

KEV ×7 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

6 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×3	1.10.1-fix.1	—	not yet scanned
langgenius/dify-web	1.10.1-fix.1	1139213	3,061
langgenius/dify-sandbox	0.2.12	0027140	1,987
langgenius/dify-plugin-daemon	0.5.1-local	565457,719	70,572
bitnamilegacy/postgresql	16.3.0-debian-12-r4	4486307	5,133
bitnamilegacy/redis	7.2.4-debian-12-r13	4583249	4,655

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

8,779 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	UBUNTU-CVE-2026-81002	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89478	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89541	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89542	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89551	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89656	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89674	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-52914	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-64355	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74616	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74744	linux@6.8.0-88.89	no fix listed
Medium	GHSA-2xpw-w6gg-jr37	urllib3@2.4.0	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@2.4.0	2.6.0
Medium	USN-8344-3	python-pip@24.0+dfsg-1ubuntu1.3	24.0+dfsg-1ubuntu1.3+esm3
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.38.0	0.52.0
Medium	UBUNTU-CVE-2026-74730	linux@6.8.0-88.89	no fix listed
Medium	DEBIAN-CVE-2019-1010024	glibc@2.36-9+deb12u7	no fix listed
Medium	UBUNTU-CVE-2026-23240	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2020-14356	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-2447	libvpx@1.14.0-1ubuntu2.2	1.14.0-1ubuntu2.3
Medium	DEBIAN-CVE-2026-42009	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2026-43083	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-89537	linux@6.8.0-88.89	no fix listed
Medium	GO-2024-3106	stdlib@go1.21.9	1.22.7
Medium	DEBIAN-CVE-2026-33846	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7
Medium	UBUNTU-CVE-2019-6988	openjpeg2@2.5.0-2ubuntu0.4	no fix listed
Medium	DEBIAN-CVE-2023-6237	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1
Medium	UBUNTU-CVE-2026-53215	linux@6.8.0-88.89	6.8.0-137.137
Medium	UBUNTU-CVE-2026-53216	linux@6.8.0-88.89	6.8.0-142.142
Medium	UBUNTU-CVE-2026-74376	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-89533	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89653	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-90042	linux@6.8.0-88.89	no fix listed
Medium	GHSA-m99w-x7hq-7vfj	next@15.5.7	15.5.21
Medium	UBUNTU-CVE-2026-72348	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-97413	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-64102	linux@6.8.0-88.89	6.8.0-139.139
Medium	UBUNTU-CVE-2026-74255	linux@6.8.0-88.89	6.8.0-147.147
Medium	UBUNTU-CVE-2026-74493	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74586	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74587	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74588	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74628	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-74688	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-80681	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-89479	linux@6.8.0-88.89	no fix listed
Medium	UBUNTU-CVE-2026-4424	libarchive@3.7.2-2ubuntu0.5	3.7.2-2ubuntu0.7
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.38.0	0.52.0
Medium	BIT-postgresql-2026-16239	postgresql@16.3.0-3	14.24.0
Medium	BIT-postgresql-2026-16239	PostgreSQL@16.3.0-3	14.24.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.10.0latest	3 months ago	1.10.1-fix.1	14167808,628	85,408

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/douban/dify.svg)](https://charts.stackradar.io/charts/douban/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.