galaxy 6.8.9 Helm chart

Name: galaxy Helm chart 6.8.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Not scored yet

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Version 6.8.9 todayapp version 26.1.1 0Artifact Hub

galaxy 6.8.9 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. The highest contribution is DSA-5497-2 in libwebp 0.6.1-2.1, fixed in 0.6.1-2.1+deb11u2.

Radar Score

Not yet scored

The daily scoring run has not folded the 3 images into a score yet.

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0032346	3,803
library/nginx	1.22.0	511651	1,313
tusproject/tusd	v1.13.0	2443112	2,357

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

613 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GO-2026-6603	stdlib@go1.21.0	1.26.9
Low	GO-2026-5972	stdlib@go1.21.0	1.25.13
Low	GO-2026-6088	stdlib@go1.21.0	1.25.13
Low	GO-2026-6089	stdlib@go1.21.0	1.25.13
Low	GO-2026-6090	stdlib@go1.21.0	1.25.13
Low	GO-2026-6611	golang.org/x/net@v0.14.0	0.60.0
Low	GO-2026-6611	stdlib@go1.21.0	1.26.9
Low	GHSA-wf93-45jw-7689	pip@25.0.1	26.1.2
Low	DEBIAN-CVE-2026-41992	gzip@1.13-1	1.13-1+deb13u1
Low	DEBIAN-CVE-2026-80229	curl@8.14.1-2+deb13u4	no fix listed
Low	GO-2026-5038	stdlib@go1.21.0	1.25.11
Low	GHSA-82r6-8w77-94w6	anyio@4.13.0	4.14.2
Low	GO-2026-6218	stdlib@go1.21.0	1.25.13
Low	GO-2026-5942	golang.org/x/net@v0.14.0	0.56.0
Low	PYSEC-2026-2106	aiohttp@3.13.5	3.14.0
Low	DEBIAN-CVE-2026-41411	vim@2:9.1.1230-2	no fix listed
Low	GHSA-chx6-46f5-w4vp	tornado@6.5.5	6.5.9
Low	GHSA-pwgv-4x5q-6m9f	sqlparse@0.5.5	0.6.0
Low	GO-2024-2610	stdlib@go1.21.0	1.21.8
Low	DEBIAN-CVE-2026-86145	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GHSA-27vj-qcqg-25rc	fsspec@2026.4.0	2026.6.0
Low	DEBIAN-CVE-2026-66035	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2026-84782	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-73078	vim@2:9.1.1230-2	no fix listed
Low	DLA-4145-1	expat@2.2.10-2+deb11u4	2.2.10-2+deb11u7
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GO-2023-2041	stdlib@go1.21.0	1.20.8
Low	GO-2026-6355	golang.org/x/crypto@v0.12.0	0.56.0
Low	GO-2025-3751	stdlib@go1.21.0	1.23.10
Low	DEBIAN-CVE-2026-5928	glibc@2.41-12+deb13u3	2.41-12+deb13u4
Low	PYSEC-2026-2112	aiohttp@3.13.5	3.14.1
Low	GO-2023-2043	stdlib@go1.21.0	1.20.8
Low	GHSA-3x9g-8vmp-wqvf	tornado@6.5.5	6.5.6
Low	GHSA-6v7p-g79w-8964	msgpack@1.1.2	1.2.1
Low	GHSA-vxq7-64xx-v4gw	urllib3@2.7.0	2.8.0
Low	GO-2026-4342	stdlib@go1.21.0	1.24.12
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	GHSA-82w8-qh3p-5jfq	starlette@1.1.0	1.3.1
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u4	no fix listed
Low	GO-2026-5970	golang.org/x/text@v0.12.0	0.39.0
Low	DLA-3951-1	curl@7.74.0-1.3+deb11u3	7.74.0-1.3+deb11u14
Low	DEBIAN-CVE-2026-42497	perl@5.40.1-6	5.40.1-6+deb13u1
Low	PYSEC-2026-237	aiohttp@3.13.5	3.14.1
Low	DEBIAN-CVE-2026-52860	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-54873	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-5rvq-cxj2-64vf	python-multipart@0.0.29	0.0.30
Low	PYSEC-2026-2113	aiohttp@3.13.5	3.14.1
Low	GO-2025-4155	stdlib@go1.21.0	1.24.11

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.9latest	today	26.1.1	—	—
6.8.8	yesterday	26.1.1	7591509	7,473
6.8.7	27 days ago	26.1.1	7591509	7,473
6.8.6	1 month ago	26.1.1	7591509	7,473
6.8.5	1 month ago	26.1.1	7591509	7,473
6.8.4	1 month ago	26.1.1	7591509	7,473

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.