galaxy 6.8.7 Helm chart

Name: galaxy Helm chart 6.8.7: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Not scored yet

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Version 6.8.7 todayapp version 26.1.1 0Artifact Hub

galaxy 6.8.7 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.2-r0, fixed in 3.1.7-r0.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0027270	3,002
library/nginx	1.22.0	041059	967
tusproject/tusd	v1.13.0	0520120	1,641

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

516 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2024-6119	openssl@3.1.2-r0	3.1.7-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.12.0	0.17.0
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.14.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.14.0	0.23.0
High	ALPINE-CVE-2024-2511	openssl@3.1.2-r0	3.1.4-r6
High	DLA-4104-1KEV	freetype@2.10.4+dfsg-1+deb11u1	2.10.4+dfsg-1+deb11u2
High	DSA-5497-2KEV	libwebp@0.6.1-2.1	0.6.1-2.1+deb11u2
High	DSA-5514-1KEV	glibc@2.31-13+deb11u4	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7+deb11u1	247.3-7+deb11u6
Medium	GO-2024-2687	stdlib@go1.21.0	1.21.9
Medium	DSA-5673-1	glibc@2.31-13+deb11u4	2.31-13+deb11u9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.12.0	0.52.0
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u10
Medium	DSA-5417-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u5
Medium	ALPINE-CVE-2024-5535	openssl@3.1.2-r0	3.1.6-r0
Medium	DSA-5343-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u4
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u3	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u2
Medium	DEBIAN-CVE-2019-1010022	glibc@2.41-12+deb13u3	no fix listed
Medium	DEBIAN-CVE-2017-17740	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2018-20796	glibc@2.41-12+deb13u3	no fix listed
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.12.0	0.31.0
Medium	DEBIAN-CVE-2015-3276	openldap@2.6.10+dfsg-1	no fix listed
Medium	DEBIAN-CVE-2019-1010023	glibc@2.41-12+deb13u3	no fix listed
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.14.0	0.17.0
Medium	DSA-5271-1	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u3
Medium	ALPINE-CVE-2023-5363	openssl@3.1.2-r0	3.1.4-r0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.2-r0	3.1.6-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.57.0	1.79.3
Medium	DEBIAN-CVE-2026-19931	curl@8.14.1-2+deb13u4	no fix listed
Medium	DEBIAN-CVE-2019-9192	glibc@2.41-12+deb13u3	no fix listed
Medium	DEBIAN-CVE-2026-63073	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2018-5709	krb5@1.21.3-5+deb13u1	no fix listed
Medium	DEBIAN-CVE-2026-18924	curl@8.14.1-2+deb13u4	no fix listed
Medium	ALPINE-CVE-2023-5678	openssl@3.1.2-r0	3.1.4-r1
Medium	DEBIAN-CVE-2026-11856	curl@8.14.1-2+deb13u4	no fix listed
Medium	ALPINE-CVE-2023-6129	openssl@3.1.2-r0	3.1.4-r3
Medium	DEBIAN-CVE-2026-18798	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2011-3389	gnutls28@3.8.9-3+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-63076	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Medium	DEBIAN-CVE-2026-10536	curl@8.14.1-2+deb13u4	no fix listed
Medium	DEBIAN-CVE-2026-28417	vim@2:9.1.1230-2	no fix listed
Medium	DEBIAN-CVE-2026-9079	curl@8.14.1-2+deb13u4	no fix listed
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.31.0	1.33.0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.2-r0	3.1.4-r5
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.12.0	0.52.0
Medium	DEBIAN-CVE-2026-8924	curl@8.14.1-2+deb13u4	no fix listed
Medium	DEBIAN-CVE-2024-26461	krb5@1.21.3-5+deb13u1	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.7latest	today	26.1.1	—	—
6.8.6	6 days ago	26.1.1	0957449	5,610
6.8.5	9 days ago	26.1.1	0957449	5,610
6.8.4	20 days ago	26.1.1	0957449	5,610

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.