langgenius/dify-api:1.0.0 container image
Docker HubScanned 15 Sept 2026
Deployed by 1 of 17,787 indexed charts (latest versions) at this tag.Docker Hub all tags of langgenius/dify-api
langgenius/dify-api:1.0.0 resolved to 066035f93856, scanned 15 Sept 2026: 685 findings, 1 critical, 2 on KEV; deployed by 1 chart, among them dify.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
685 distinct on this digest
Findings for digest 066035f93856 as scanned on 15 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 15 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-2vrm-gr82-f7m5 | aiohttp | 3.13.4 |
| Low | GHSA-43qf-4rqw-9q2g | flask-cors | 6.0.0 |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | GHSA-3j69-69wj-xqx2 | ujson | 5.13.0 |
| Low | DEBIAN-CVE-2026-63074 | openssl | no fix listed |
| Low | GHSA-c693-x898-5g4h | litellm | no fix listed |
| Low | GHSA-mf52-j94g-746m | litellm | no fix listed |
| Low | GHSA-p897-vf7j-f5h8 | litellm | no fix listed |
| Low | GHSA-mq44-7p77-q5h7 | aiohttp | 3.14.2 |
| Low | DEBIAN-CVE-2023-31484 | perl | 5.36.0-7+deb12u3 |
| Low | DEBIAN-CVE-2025-14524 | curl | 7.88.1-10+deb12u15 |
| Low | GHSA-fc8x-2rww-xw9m | pypdf | 6.15.0 |
| Low | GHSA-g9mf-h72j-4rw9 | undici | 6.23.0 |
| Low | GHSA-hg6j-4rv6-33pg | aiohttp | 3.14.0 |
| Low | DEBIAN-CVE-2025-14831 | gnutls28 | 3.7.9-2+deb12u6 |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | GHSA-g6cj-pr64-35w5 | cryptography | 50.0.0 |
| Low | GHSA-4xh5-x5gv-qwph | pip | 25.3 |
| Low | GHSA-mwh4-6h8g-pg8w | aiohttp | 3.13.4 |
| Low | GHSA-pwv6-vv43-88gr | pillow | 12.2.0 |
| Low | DEBIAN-CVE-2026-25210 | expat | no fix listed |
| Low | DEBIAN-CVE-2026-5435 | glibc | no fix listed |
| Low | GHSA-h35f-9h28-mq5c | setuptools | 83.0.0 |
| Low | DEBIAN-CVE-2026-54369 | acl | no fix listed |
| Low | GHSA-mqqc-3gqh-h2x8 | aiohttp | 3.13.3 |
| Low | GHSA-f4xh-w4cj-qxq8 | langsmith | 0.8.18 |
| Low | GHSA-6qr3-3g89-m4jj | litellm | no fix listed |
| Low | GHSA-fj7v-r99m-22gq | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-7017 | perl | no fix listed |
| Low | DEBIAN-CVE-2024-11053 | curl | 7.88.1-10+deb12u10 |
| Low | PYSEC-2026-3739 | nltk | 3.10.3 |
| Low | DEBIAN-CVE-2026-54371 | attr | no fix listed |
| Low | DEBIAN-CVE-2024-8176 | expat | 2.5.0-1+deb12u2 |
| Low | DEBIAN-CVE-2025-0395 | glibc | 2.36-9+deb12u10 |
| Low | DEBIAN-CVE-2024-22025 | nodejs | 18.20.4+dfsg-1~deb12u1 |
| Low | DEBIAN-CVE-2023-46809 | nodejs | 18.20.4+dfsg-1~deb12u1 |
| Low | DSA-5962-1 | gnutls28 | 3.7.9-2+deb12u5 |
| Low | GHSA-2c2j-9gv5-cj73 | starlette | 0.47.2 |
| Low | DEBIAN-CVE-2025-4598 | systemd | 252.38-1~deb12u1 |
| Low | GHSA-37q5-v5qm-c9v8 | transformers | 4.38.0 |
| Low | GHSA-7432-952r-cw78 | authlib | 1.6.9 |
| Low | PYSEC-2026-3721 | pip | 26.2 |
| Low | GHSA-69f9-5gxw-wvc2 | aiohttp | 3.13.3 |
| Low | DEBIAN-CVE-2025-15079 | curl | no fix listed |
| Low | GHSA-3gqm-fcw5-w839 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-21713 | nodejs | 18.20.4+dfsg-1~deb12u2 |
| Low | GHSA-59p9-h35m-wg4g | transformers | 4.53.0 |
| Low | GHSA-cpwx-vrp4-4pq7 | jinja2 | 3.1.6 |
| Low | GHSA-9548-qrrj-x5pj | aiohttp | 3.12.14 |
| Low | DEBIAN-CVE-2026-6429 | curl | no fix listed |