Galaxyproject

6 CVEs across 1 Galaxyproject products. Browse Galaxyproject vulnerabilities, severities, and proof-of-concept exploits.

Galaxyproject products with known CVEs

ProductCVEs
Galaxy7
Galaxyproject CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-42351Medium6.52024-09-20Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An a…
CVE-2024-42346High7.62024-09-20Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The…
CVE-2023-42812Medium6.32023-09-22Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious…
CVE-2023-27578Critical9.12023-03-20Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insuffici…
CVE-2015-10062Medium5.52023-01-17A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Li…
CVE-2022-23470High8.62022-12-06Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be…
CVE-2018-1000516Medium6.12018-06-26The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in…