galaxy 6.8.9 Helm chart

Name: galaxy Helm chart 6.8.9: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Scored 15 Oct 2026

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Version 6.8.9 todayapp version 26.1.1 0Artifact Hub

galaxy 6.8.9 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. Across them, 634 findings — 7 critical, 5 high — 5 on CISA KEV. The highest contribution is DSA-5497-2 in libwebp 0.6.1-2.1, fixed in 0.6.1-2.1+deb11u2.

Radar Score

7,5437591530

634 findings over 3 of 3 images measured

KEV ×5 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0032367	3,873
library/nginx	1.22.0	511651	1,313
tusproject/tusd	v1.13.0	2443112	2,357

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

634 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-fj7v-r99m-22gq	pillow@12.2.0	12.3.0
Low	GO-2024-2600	stdlib@go1.21.0	1.21.8
Low	DEBIAN-CVE-2026-102010	gcc-14@14.2.0-19	no fix listed
Low	DLA-4309-1	libxslt@1.1.34-4+deb11u1	1.1.34-4+deb11u3
Low	GO-2026-4440	golang.org/x/net@v0.14.0	0.45.0
Low	DLA-4143-1	glibc@2.31-13+deb11u4	2.31-13+deb11u12
Low	DSA-5678-1	glibc@2.31-13+deb11u4	2.31-13+deb11u10
Low	GHSA-j5w8-q4qc-rx2x	golang.org/x/crypto@v0.12.0	0.45.0
Low	GO-2025-4011	stdlib@go1.21.0	1.24.8
Low	GO-2025-4015	stdlib@go1.21.0	1.24.8
Low	DEBIAN-CVE-2025-15079	curl@8.14.1-2+deb13u4	no fix listed
Low	GO-2026-4441	golang.org/x/net@v0.14.0	0.45.0
Low	DEBIAN-CVE-2026-58470	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-67693	gnutls28@3.8.9-3+deb13u4	no fix listed
Low	DSA-5650-1	util-linux@2.36.1-8+deb11u1	2.36.1-8+deb11u2
Low	PYSEC-2026-3721	pip@25.0.1	26.2
Low	GHSA-w6j9-cwv2-h6wq	pyjwt@2.12.1	2.14.0
Low	GHSA-8c25-4j27-2rv3	mistune@3.2.1	3.3.0
Low	PYSEC-2026-4183	pyjwt@2.12.1	2.15.0
Low	GHSA-8mpj-m6qm-5qr8	mistune@3.2.1	3.3.0
Low	GO-2026-4603	stdlib@go1.21.0	1.25.8
Low	DLA-4064-1	libxml2@2.9.10+dfsg-6.7+deb11u2	2.9.10+dfsg-6.7+deb11u6
Low	GO-2025-4175	stdlib@go1.21.0	1.24.11
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.57.0	1.83.1
Low	GHSA-qfrw-5rxm-mhh2	mistune@3.2.1	3.3.0
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.13.5	3.14.1
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.12.0	0.52.0
Low	GO-2026-4864	stdlib@go1.21.0	1.25.9
Low	GHSA-v36g-jcw9-x7cw	pydantic-ai-slim@1.99.0	1.107.7
Low	GHSA-v36g-jcw9-x7cw	pydantic-ai@1.99.0	1.107.7
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.12.0	0.45.0
Low	GO-2026-4982	stdlib@go1.21.0	1.25.10
Low	GO-2026-5025	golang.org/x/net@v0.14.0	0.55.0
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.12.0	0.52.0
Low	PYSEC-2026-2214	mistune@3.2.1	3.3.0
Low	DEBIAN-CVE-2026-78410	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-89160	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-77117	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-80489	glibc@2.41-12+deb13u3	no fix listed
Low	GHSA-p4g4-x82p-q773	pyjwt@2.12.1	2.14.0
Low	DLA-4437-1	gnupg2@2.2.27-2+deb11u2	2.2.27-2+deb11u3
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r2	1.36.1-r7
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed
Low	GHSA-hj66-6f7g-4r5v	oauthlib@3.3.1	4.0.0
Low	DLA-4195-1	krb5@1.18.3-6+deb11u2	1.18.3-6+deb11u7
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r2	1.36.1-r7
Low	GO-2026-6091	stdlib@go1.21.0	1.25.13
Low	GO-2025-4008	stdlib@go1.21.0	1.24.8
Low	GO-2025-4010	stdlib@go1.21.0	1.24.8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.9latest	today	26.1.1	7591530	7,543
6.8.8	yesterday	26.1.1	7591530	7,543
6.8.7	27 days ago	26.1.1	7591530	7,543
6.8.6	1 month ago	26.1.1	7591530	7,543
6.8.5	1 month ago	26.1.1	7591530	7,543
6.8.4	1 month ago	26.1.1	7591530	7,543

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.