galaxy Helm chart

Name: galaxy Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Scored 14 Sept 2026

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Latest 6.8.6 3 days agoapp version 26.1.1 0Artifact Hub

galaxy 6.8.6 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. Across the 2 measured, 442 findings — 0 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.2-r0, fixed in 3.1.7-r0.

Radar Score

4,6010547389

442 findings over 2 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0027269	2,967
library/nginx	1.22.0	—	not yet scanned
tusproject/tusd	v1.13.0	0520120	1,634

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

442 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-6v2p-p543-phr9	golang.org/x/oauth2@v0.11.0	0.27.0
Medium	DEBIAN-CVE-2019-1010025	glibc@2.41-12+deb13u3	no fix listed
Low	DEBIAN-CVE-2026-57433	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-8926	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-13221	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-33412	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-42496	perl@5.40.1-6	5.40.1-6+deb13u1
Low	GHSA-89gr-r52h-f8rx	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-jppx-rxg9-jmrx	golang.org/x/crypto@v0.12.0	0.52.0
Low	DEBIAN-CVE-2026-14456	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	GHSA-62p4-gmf7-7g93	pillow@12.2.0	12.3.0
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-66032	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2026-39881	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-80255	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-12087	perl@5.40.1-6	5.40.1-6+deb13u1
Low	PYSEC-2026-3452	pillow@12.2.0	12.3.0
Low	GHSA-ffq3-xpv3-j92q	mistune@3.2.1	3.3.0
Low	GHSA-vp52-pcj8-j9qc	google.golang.org/grpc@v1.57.0	1.83.1
Low	GHSA-4j32-57v6-6g45	mistune@3.2.1	3.3.0
Low	GHSA-c8j7-8cv4-2xmq	mistune@3.2.1	3.3.0
Low	GHSA-qcq2-496w-v96p	mistune@3.2.1	3.3.0
Low	GHSA-g3cq-j2xw-wf74	aiohttp@3.13.5	3.14.1
Low	DEBIAN-CVE-2026-13608	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-34982	vim@2:9.1.1230-2	no fix listed
Low	GHSA-vjc4-5qp5-m44j	pillow@12.2.0	12.3.0
Low	DEBIAN-CVE-2026-63072	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	DEBIAN-CVE-2026-85091	zlib@1:1.3.dfsg+really1.3.1-1+b1	no fix listed
Low	DEBIAN-CVE-2021-31879	wget@1.25.0-2	no fix listed
Low	GHSA-xj96-63gp-2gmr	pillow@12.2.0	12.3.0
Low	GO-2023-2102	stdlib@go1.21.0	1.20.10
Low	GHSA-mgf9-4vpg-hj56	tornado@6.5.5	6.5.6
Low	DEBIAN-CVE-2026-80230	curl@8.14.1-2+deb13u4	no fix listed
Low	DEBIAN-CVE-2026-58469	wget@1.25.0-2	no fix listed
Low	DEBIAN-CVE-2026-54874	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	DEBIAN-CVE-2026-66035	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2
Low	DEBIAN-CVE-2026-73078	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2025-69720	ncurses@6.5+20250216-2	no fix listed
Low	GHSA-63hw-fmq6-xxg2	aiohttp@3.13.5	3.14.1
Low	GHSA-6v7p-g79w-8964	msgpack@1.1.2	1.2.1
Low	DEBIAN-CVE-2026-86145	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	DEBIAN-CVE-2026-63075	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
Low	GHSA-xcgm-r5h9-7989	aiohttp@3.13.5	3.14.1
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-5rvq-cxj2-64vf	python-multipart@0.0.29	0.0.30
Low	GHSA-jpw9-pfvf-9f58	mcp@1.27.1	1.27.2
Low	DEBIAN-CVE-2026-46483	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-9538	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-58050	libssh2@1.11.1-1+deb13u1	1.11.1-1+deb13u2

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.6latest	3 days ago	26.1.1	0547389	4,601
6.8.5	5 days ago	26.1.1	0547389	4,601
6.8.4	16 days ago	26.1.1	0547389	4,601

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.