Galaxyproject
6 CVEs across 1 Galaxyproject products. Browse Galaxyproject vulnerabilities, severities, and proof-of-concept exploits.
Galaxyproject products with known CVEs
Galaxyproject CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-42351 | Medium | 6.5 | 2024-09-20 | Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An a… |
CVE-2024-42346 | High | 7.6 | 2024-09-20 | Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The… |
CVE-2023-42812 | Medium | 6.3 | 2023-09-22 | Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious… |
CVE-2023-27578 | Critical | 9.1 | 2023-03-20 | Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insuffici… |
CVE-2015-10062 | Medium | 5.5 | 2023-01-17 | A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Li… |
CVE-2022-23470 | High | 8.6 | 2022-12-06 | Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be… |
CVE-2018-1000516 | Medium | 6.1 | 2018-06-26 | The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in… |