Galaxyproject vulnerabilities
We track 3 vulnerabilities in Galaxyproject products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on September 20, 2024.
Latest Galaxyproject vulnerabilities
- 9.1 Critical severity
galaxy: Exposure of Sensitive Information to an Unauthorized Actor
Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering.
- 7.5 High severity
galaxy: Incorrect Authorization
Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are affected by an insufficient permission check. Unsupported versions are likely affected as far back as the functionality of Vi
- 7.5 High severity
galaxy: Improper Limitation of a Pathname to a Restricted Directory
Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to Gunicorn, which can be used to read any file accessible to the operating system user under which Galaxy is running. This vu