galaxy 6.8.9 Helm chart

Name: galaxy Helm chart 6.8.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Scored 15 Oct 2026

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Version 6.8.9 todayapp version 26.1.1 0Artifact Hub

galaxy 6.8.9 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. Across them, 634 findings — 7 critical, 5 high — 5 on CISA KEV. The highest contribution is DSA-5497-2 in libwebp 0.6.1-2.1, fixed in 0.6.1-2.1+deb11u2.

Radar Score

7,5437591530

634 findings over 3 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0032367	3,873
library/nginx	1.22.0	511651	1,313
tusproject/tusd	v1.13.0	2443112	2,357

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

530 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GO-2026-6088	stdlib@go1.21.0	1.25.13
Low	GO-2026-6089	stdlib@go1.21.0	1.25.13
Low	GO-2026-6090	stdlib@go1.21.0	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.14.0	0.60.0
Low	GO-2026-6611	stdlib@go1.21.0	1.26.9
Low	GHSA-wf93-45jw-7689	pip@25.0.1	26.1.2
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u4	no fix listed
Low	GO-2026-5038	stdlib@go1.21.0	1.25.11
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.7.0	2.8.0
Low	GHSA-82r6-8w77-94w6	anyio@4.13.0	4.14.2
Low	GO-2026-6218	stdlib@go1.21.0	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.14.0	0.56.0
Low	PYSEC-2026-2106	aiohttp@3.13.5	3.14.0
Low	DEBIAN-CVE-2026-41411	vim@2:9.1.1230-2	no fix listed
Low	GHSA-chx6-46f5-w4vp	tornado@6.5.5	6.5.9
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.5.5	0.6.0
Low	GO-2024-2610	stdlib@go1.21.0	1.21.8
Low	DEBIAN-CVE-2026-86145	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-27vj-qcqg-25rc	fsspec@2026.4.0	2026.6.0
Low	DEBIAN-CVE-2026-66035	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2026-84782	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-73078	vim@2:9.1.1230-2	no fix listed
Low	DLA-4145-1	expat@2.2.10-2+deb11u4	2.2.10-2+deb11u7
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GO-2023-2041	stdlib@go1.21.0	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.12.0	0.56.0
Low	GO-2025-3751	stdlib@go1.21.0	1.23.10
Low	DEBIAN-CVE-2026-5928	glibc@2.41-12+deb13u3	2.41-12+deb13u4
Low	PYSEC-2026-2112	aiohttp@3.13.5	3.14.1
Low	GO-2023-2043	stdlib@go1.21.0	1.20.8
Low	GHSA-3x9g-8vmp-wqvf	tornado@6.5.5	6.5.6
Low	GHSA-6v7p-g79w-8964	msgpack@1.1.2	1.2.1
Low	GO-2026-4342	stdlib@go1.21.0	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	GHSA-82w8-qh3p-5jfq	starlette@1.1.0	1.3.1
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u4	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.12.0	0.39.0
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	PYSEC-2026-237	aiohttp@3.13.5	3.14.1
Low	DEBIAN-CVE-2026-52860	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-54873	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-5rvq-cxj2-64vf	python-multipart@0.0.29	0.0.30
Low	PYSEC-2026-2113	aiohttp@3.13.5	3.14.1
Low	GO-2025-4155	stdlib@go1.21.0	1.24.11
Low	DEBIAN-CVE-2026-48962	perl@5.40.1-6	5.40.1-6+deb13u1
Low	PYSEC-2026-2104	aiohttp@3.13.5	3.14.0
Low	DLA-4063-1	gnutls28@3.7.1-5+deb11u2	3.7.1-5+deb11u7

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.9latest	today	26.1.1	7591530	7,543
6.8.8	yesterday	26.1.1	7591530	7,543
6.8.7	27 days ago	26.1.1	7591530	7,543
6.8.6	1 month ago	26.1.1	7591530	7,543
6.8.5	1 month ago	26.1.1	7591530	7,543
6.8.4	1 month ago	26.1.1	7591530	7,543

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.