langgenius/dify-api:1.0.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of langgenius/dify-api
langgenius/dify-api:1.0.0 resolved to 066035f93856, scanned 14 Sept 2026: 682 findings, 3 critical, 2 on KEV; deployed by 1 chart, among them dify.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
682 distinct on this digest
Findings for digest 066035f93856 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Medium | GHSA-g867-7843-wf8q | pypdf | 6.14.2 |
| Medium | GHSA-jjhc-v7c2-5hh6 | litellm | 1.83.0 |
| Medium | GHSA-2h4p-vjrc-8xpq | mako | 1.3.12 |
| Medium | GHSA-m4rf-3fr8-xwx3 | nltk | 3.10.3 |
| Medium | DEBIAN-CVE-2026-5260 | gnutls28 | 3.7.9-2+deb12u7 |
| Medium | GHSA-hx9q-6w63-j58v | orjson | 3.11.6 |
| Medium | GHSA-4jcj-7x88-m979 | litellm | 1.84.0 |
| Medium | GHSA-jm66-cg57-jjv5 | azure-core | 1.38.0 |
| Medium | DEBIAN-CVE-2026-66046 | expat | no fix listed |
| Medium | GHSA-7gcm-g887-7qv7 | protobuf | 5.29.6 |
| Medium | DEBIAN-CVE-2026-8927 | curl | no fix listed |
| Medium | DEBIAN-CVE-2026-28388 | openssl | 3.0.19-1~deb12u2 |
| Medium | GHSA-x5ph-mj9p-rfr8 | nltk | 3.10.0 |
| Medium | DEBIAN-CVE-2025-69421 | openssl | 3.0.18-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-2229 | node-undici | no fix listed |
| Medium | GHSA-v9p9-hfj2-hcw8 | undici | 6.24.0 |
| Medium | DEBIAN-CVE-2024-22025 | nodejs | 18.20.4+dfsg-1~deb12u1 |
| Medium | DEBIAN-CVE-2026-28387 | openssl | 3.0.19-1~deb12u2 |
| Medium | GHSA-58pv-8j8x-9vj2 | jaraco-context | 6.1.0 |
| Medium | DEBIAN-CVE-2026-13697 | node-undici | no fix listed |
| Medium | GHSA-v68g-wm8c-6x7j | transformers | 4.36.0 |
| Medium | GHSA-63hf-3vf5-4wqf | aiohttp | 3.13.4 |
| Medium | DEBIAN-CVE-2025-23166 | nodejs | 18.20.4+dfsg-1~deb12u2 |
| Medium | GHSA-96hv-2xvq-fx4p | ws | 7.5.11 |
| Medium | DEBIAN-CVE-2026-28389 | openssl | 3.0.19-1~deb12u2 |
| Medium | DEBIAN-CVE-2026-28390 | openssl | 3.0.19-1~deb12u2 |
| Medium | GHSA-jr27-m4p2-rc6r | pyasn1 | 0.6.3 |
| Medium | DEBIAN-CVE-2019-1010025 | glibc | no fix listed |
| Low | DEBIAN-CVE-2025-69420 | openssl | 3.0.18-1~deb12u2 |
| Low | DEBIAN-CVE-2026-57433 | perl | no fix listed |
| Low | PYSEC-2026-2132 | click | 8.3.3 |
| Low | DEBIAN-CVE-2026-12151 | node-undici | no fix listed |
| Low | GHSA-vxpw-j846-p89q | undici | 6.27.0 |
| Low | DEBIAN-CVE-2026-27135 | nghttp2 | 1.52.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-13221 | perl | no fix listed |
| Low | GHSA-63vm-454h-vhhq | pyasn1 | 0.6.2 |
| Low | DEBIAN-CVE-2026-42496 | perl | no fix listed |
| Low | PYSEC-2026-3750 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2024-56406 | perl | 5.36.0-7+deb12u2 |
| Low | DEBIAN-CVE-2024-27982 | nodejs | 18.20.4+dfsg-1~deb12u1 |
| Low | PYSEC-2023-235 | couchbase | no fix listed |
| Low | GHSA-j37q-q7p9-vpwm | litellm | no fix listed |
| Low | PYSEC-2026-2237 | nltk | 3.9.4 |
| Low | DEBIAN-CVE-2026-48930 | nodejs | no fix listed |
| Low | DEBIAN-CVE-2024-22020 | nodejs | 18.20.4+dfsg-1~deb12u1 |
| Low | GHSA-p3m8-78j2-g5p3 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-9076 | openssl | 3.0.20-1~deb12u2 |
| Low | GHSA-62p4-gmf7-7g93 | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-82209 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-66032 | libssh2 | 1.10.0-3+deb12u1 |