dify-enterprise 3.9.8 Helm chart
openshiftScored 14 Sept 2026
Release https://langgenius.github.io/dify-helm/
Version 3.9.8deploys tag 3.9.8-ubi9 0Artifact Hub
dify-enterprise 3.9.8 deploys 13 container images: langgenius/dify-ee-api, langgenius/dify-ee-audit, langgenius/dify-ee-collector, langgenius/dify-ee-enterprise and 9 more. Across the 10 measured, 547 findings — 0 critical, 0 high. The highest contribution is GHSA-p293-qw3h-jr36 in next 16.2.6, fixed in 16.3.3. Chart.yaml declares kubeVersion >=1.21.0; rendered for Kubernetes 1.21.0.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
13 images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| langgenius/ | 3.9.8-ubi9 | — | not yet scanned |
| langgenius/ | 3.9.8-ubi9 | 00051 | 387 |
| langgenius/ | 3.9.8-ubi9 | 00053 | 399 |
| langgenius/ | 3.9.8-ubi9 | 00050 | 383 |
| langgenius/ | 3.9.8-ubi9 | 001056 | 739 |
| langgenius/ | 3.9.8-ubi9 | 00054 | 404 |
| registry.redhat.io/ | 10.2-1784142920 | — | unmeasured |
| langgenius/ | 3.9.8-ubi9 | 00052 | 404 |
| langgenius/ | 3.9.8-ubi9 | 00050 | 384 |
| langgenius/ | 3.9.8-ubi9 | 00051 | 399 |
| langgenius/ | 3.9.8-ubi9 | 00053 | 408 |
| langgenius/ | 3.9.8-ubi9 | — | not yet scanned |
| langgenius/ | 3.9.8-ubi9 | 001057 | 753 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
114 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-p293-qw3h-jr36 | next | 16.3.3 |
| Medium | GHSA-m99w-x7hq-7vfj | next | 16.2.11 |
| Medium | GHSA-grv7-fg5c-xmjg | braces | 3.0.3 |
| Medium | GHSA-6gpp-xcg3-4w24 | next | 16.2.11 |
| Medium | GHSA-89xv-2m56-2m9x | next | 16.2.11 |
| Medium | GHSA-p9j2-gv94-2wf4 | next | 16.2.11 |
| Medium | RHSA-2026:55601 | nodejs-nodemon | 0:3.1.14-2.module+el9.8.0+24637+e0b636e5 |
| Medium | RHSA-2026:55603 | nodejs-nodemon | 0:3.1.14-3.module+el9.8.0+24638+75f46aee |
| Medium | RHSA-2026:55603 | nodejs | 1:24.18.0-6.module+el9.8.0+24638+75f46aee |
| Medium | GHSA-3ppc-4f35-3m26 | minimatch | 3.1.3 |
| Low | GHSA-vxpw-j846-p89q | undici | 6.27.0 |
| Low | GHSA-vp52-pcj8-j9qc | google.golang.org/ | 1.83.1 |
| Low | GHSA-rgw5-rvv9-x895 | brace-expansion | 1.1.18 |
| Low | RHSA-2026:55440 | glib2 | 0:2.68.4-19.el9_8.9 |
| Low | GHSA-wx67-qw84-cm4g | react-server-dom-webpack | 19.2.8 |
| Low | RHSA-2026:55439 | curl | 0:7.76.1-40.el9_8.5 |
| Low | GHSA-23hp-3jrh-7fpw | tar | 7.5.19 |
| Low | RHSA-2026:47057 | nodejs-nodemon | 0:3.1.14-2.module+el9.8.0+24539+0ea88729 |
| Low | RHSA-2026:47057 | nodejs | 1:24.18.0-3.module+el9.8.0+24537+83ec84e1 |
| Low | RHSA-2026:47058 | nodejs-nodemon | 0:3.1.14-1.module+el9.8.0+24540+c30b2ffe |
| Low | RHSA-2026:42089 | glib2 | 0:2.68.4-19.el9_8.2 |
| Low | GHSA-7r86-cg39-jmmj | minimatch | 3.1.3 |
| Low | RHSA-2026:61383 | nodejs-nodemon | 0:3.1.14-2.module+el9.8.0+24709+804d6b5b |
| Low | RHSA-2026:61386 | nodejs-nodemon | 0:3.1.14-3.module+el9.8.0+24708+e71d2e1d |
| Low | RHSA-2026:61386 | nodejs | 1:24.19.0-1.module+el9.8.0+24708+e71d2e1d |
| Low | RHSA-2026:52674 | libarchive | 0:3.5.3-11.el9_8 |
| Low | GHSA-23c5-xmqv-rm74 | minimatch | 3.1.4 |
| Low | GHSA-mh99-v99m-4gvg | brace-expansion | 1.1.17 |
| Low | GHSA-8x88-c5mf-7j5w | tar | 7.5.18 |
| Low | GHSA-c2c7-rcm5-vvqj | picomatch | 2.3.2 |
| Low | GHSA-q8wf-6r8g-63ch | next | 16.2.11 |
| Low | GHSA-mwp4-54f8-5fhr | ip-address | 10.3.1 |
| Low | GHSA-r292-9mhp-454m | tar | 7.5.21 |
| Low | GHSA-w4pp-8pjf-rmxw | pacote | 21.5.1 |
| Low | GHSA-4xrf-jv44-h6hh | ip-address | 10.2.2 |
| Low | GHSA-4c39-4ccg-62r3 | next | 16.2.11 |
| Low | GHSA-955p-x3mx-jcvp | next | 16.2.11 |
| Low | GHSA-hc8v-wwc9-vgxm | github.com/ | 5.19.2 |
| Low | GHSA-f886-m6hf-6m8v | brace-expansion | 1.1.13 |
| Low | GHSA-22jq-vg5j-6vgg | ip-address | 10.2.1 |
| Low | GHSA-qgq7-7hm3-q39j | github.com/ | 5.19.2 |
| Low | RHSA-2026:42952 | glibc | 0:2.34-274.el9_8 |
| Low | GHSA-w8wr-v893-vjvp | tar | 7.5.18 |
| Low | GHSA-4633-3j49-mh5q | next | 16.2.11 |
| Low | RHSA-2026:64800 | glib2 | 0:2.68.4-19.el9_8.10 |
| Low | GHSA-2xp9-vwfh-vxw4 | next | 16.3.3 |
| Low | RHSA-2026:58936 | sqlite | 0:3.34.1-11.el9_8 |
| Low | GHSA-qc2q-p7wx-3px3 | google.golang.org/ | 1.83.1 |
| Low | RHSA-2026:50147 | libgcrypt | 0:1.10.0-13.el9_8 |
| Low | GHSA-gvwx-54wh-qm9j | tar | 7.5.17 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/openshift/dify-enterprise)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.