p PatchFirst

PatchFirst · Latest vulnerabilities

galaxy-auth vulnerabilities

Vulnerabilities published for galaxy-auth in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2024-42346

    High · CVSS 7.6EPSS 0.77%Fix available

    Stored Cross Site Scripting (Stored XSS) in Galaxy

    Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability.

    galaxy-authPython
    • Update to 24.1.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →