langgenius/dify-api:1.16.1 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of langgenius/dify-api
langgenius/dify-api:1.16.1 resolved to dcefa5f7c47c, scanned 14 Sept 2026: 367 findings, 0 critical; deployed by 1 chart, among them dify.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
367 distinct on this digest
Findings for digest dcefa5f7c47c as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-4873 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-5704 | tar | no fix listed |
| Low | GHSA-3wxw-xv34-2frg | gitpython | 3.1.59 |
| Low | GHSA-6hr6-w5qg-qmwg | h2 | 4.4.1 |
| Low | GHSA-f2fp-rgf2-35cp | httpx2 | 2.10.0 |
| Low | DEBIAN-CVE-2026-3184 | util-linux | no fix listed |
| Low | GHSA-qvv7-cg9c-w4x3 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-58055 | nghttp2 | no fix listed |
| Low | DEBIAN-CVE-2026-7010 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-19487 | perl | no fix listed |
| Low | DEBIAN-CVE-2023-52426 | expat | no fix listed |
| Low | GHSA-3v7f-55p6-f55p | picomatch | 4.0.4 |
| Low | DEBIAN-CVE-2026-89158 | pcre2 | 10.42-1+deb12u1 |
| Low | DEBIAN-CVE-2025-27587 | openssl | no fix listed |
| Low | DEBIAN-CVE-2013-4392 | systemd | no fix listed |
| Low | GHSA-8mpw-7fpc-4gqj | nltk | 3.10.3 |
| Low | GHSA-6hwm-xvph-95vm | nltk | 3.10.3 |
| Low | PYSEC-2026-3954 | nltk | 3.10.0 |
| Low | DEBIAN-CVE-2026-78408 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-21717 | nodejs | no fix listed |
| Low | GHSA-3jxr-9vmj-r5cp | brace-expansion | 2.1.2 |
| Low | DEBIAN-CVE-2026-6019 | python3.11 | no fix listed |
| Low | DEBIAN-CVE-2023-31439 | systemd | no fix listed |
| Low | GHSA-vmf3-w455-68vh | tar | 7.5.16 |
| Low | DEBIAN-CVE-2026-76957 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2023-31437 | systemd | no fix listed |
| Low | DEBIAN-CVE-2023-31438 | systemd | no fix listed |
| Low | GHSA-f794-5jv7-7672 | nltk | 3.10.3 |
| Low | GHSA-pqhf-p39g-3x64 | uv | 0.9.6 |
| Low | DEBIAN-CVE-2026-72522 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56403 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56404 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56405 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56408 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56406 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56407 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56410 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-56411 | expat | 2.5.0-1+deb12u3 |
| Low | DEBIAN-CVE-2026-78410 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-89161 | pcre2 | 10.42-1+deb12u1 |
| Low | GO-2026-5026 | stdlib | 1.25.13 |
| Low | DEBIAN-CVE-2025-14104 | util-linux | no fix listed |
| Low | DEBIAN-CVE-2026-78409 | util-linux | no fix listed |
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.82.2 |
| Low | GHSA-6hm5-jgcp-p838 | nltk | 3.10.0 |
| Low | GHSA-fg7f-2386-8897 | nltk | 3.10.0 |
| Low | GHSA-m42h-3232-vpv3 | nltk | 3.10.0 |
| Low | GHSA-xh95-f55m-82fw | nltk | 3.10.0 |
| Low | GHSA-7mj9-2mp8-4m2p | httpcore2 | 2.10.0 |
| Low | GHSA-jp53-mhqp-8xcg | pypdf | 6.16.0 |