dify Helm chart

Name: dify Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

kubeblocks

Scored 14 Sept 2026

A Helm chart for Dify

Latest 0.5.1 1 year agoapp version 0.6.11 1Artifact Hub

dify 0.5.1 deploys 5 container images: langgenius/dify-api, langgenius/dify-web, langgenius/dify-sandbox, bitnami/postgresql and 1 more. Across the 3 measured, 1,709 findings — 9 critical, 20 high — 2 on CISA KEV. The highest contribution is GHSA-f82v-jwr5-mffw in next 14.1.0, fixed in 14.2.25.

Radar Score

20,4039203111,368

1,709 findings over 3 of 5 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
langgenius/dify-api×2	0.6.11	411207927	13,540
langgenius/dify-web	0.6.11	162686	1,793
langgenius/dify-sandbox	0.2.0	2578355	5,091
bitnami/postgresql	16.3.0-debian-12-r4	—	unmeasured
bitnami/redis	7.2.4-debian-12-r13	—	unmeasured

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

1,382 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2025-46394	busybox@1.36.1-r15	1.36.1-r21
Low	DEBIAN-CVE-2026-40228	systemd@252.22-1~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-85008	node-undici@5.15.0+dfsg1+~cs20.10.9.3-1+deb12u3	no fix listed
Low	DEBIAN-CVE-2026-0965	libssh@0.10.6-0+deb12u1	no fix listed
Low	GHSA-5239-wwwm-4pmq	pygments@2.18.0	2.20.0
Low	DEBIAN-CVE-2023-26819	cjson@1.7.15-1	1.7.15-1+deb12u3
Low	DEBIAN-CVE-2025-50422	cairo@1.16.0-7	no fix listed
Low	DEBIAN-CVE-2025-6170	libxml2@2.9.14+dfsg-1.3~deb12u1	2.9.14+dfsg-1.3~deb12u3
Low	DEBIAN-CVE-2026-52296	ffmpeg@7:5.1.4-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-57062	gnupg2@2.2.40-1.1	no fix listed
Low	GHSA-6vgw-5pg2-w6jp	pip@23.0.1	26.0
Low	GHSA-g92j-qhmh-64v2	sentry-sdk@1.39.2	1.45.1
Low	DEBIAN-CVE-2026-1485	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u9
Low	DEBIAN-CVE-2026-53910	diffutils@1:3.8-4	no fix listed
Low	DEBIAN-CVE-2024-21783	intel-mediasdk@22.5.4-1	no fix listed
Low	DEBIAN-CVE-2026-52297	ffmpeg@7:5.1.4-0+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86137	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-86141	libxml2@2.9.14+dfsg-1.3~deb12u1	no fix listed
Low	DEBIAN-CVE-2026-24515	expat@2.5.0-1	no fix listed
Low	ALPINE-CVE-2024-58251	busybox@1.36.1-r15	1.36.1-r21
Low	DEBIAN-CVE-2026-89156	pcre2@10.42-1	10.42-1+deb12u1
Low	GHSA-3h52-269p-cp9r	next@14.1.0	14.2.30
Low	DEBIAN-CVE-2025-9165	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-28422	vim@2:9.0.1378-2	no fix listed
Low	DEBIAN-CVE-2024-13978	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2025-8534	tiff@4.5.0-6+deb12u1	no fix listed
Low	DEBIAN-CVE-2026-5958	sed@4.9-1	4.9-1+deb12u1
Low	DEBIAN-CVE-2026-6368	glibc@2.36-9+deb12u6	no fix listed
Low	DEBIAN-CVE-2024-21808	intel-mediasdk@22.5.4-1	no fix listed
Low	DEBIAN-CVE-2024-28051	intel-mediasdk@22.5.4-1	no fix listed
Low	DEBIAN-CVE-2024-28030	intel-mediasdk@22.5.4-1	no fix listed
None	GHSA-f96h-pmfr-66vw	starlette@0.37.2	0.40.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.5.1latest	1 year ago	0.6.11	9203111,368	20,403

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/kubeblocks/dify.svg)](https://charts.stackradar.io/charts/kubeblocks/dify)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.