galaxy Helm chart

Name: galaxy Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

cloudve

Scored 14 Sept 2026

Chart for Galaxy, an open, web-based platform for accessible, reproducible, and transparent computational biomedical research.

Latest 6.8.6 3 days agoapp version 26.1.1 0Artifact Hub

galaxy 6.8.6 deploys 3 container images: quay.io/galaxyproject/galaxy-min, library/nginx and tusproject/tusd. Across the 2 measured, 442 findings — 0 critical, 5 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6119 in openssl 3.1.2-r0, fixed in 3.1.7-r0.

Radar Score

4,6010547389

442 findings over 2 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
quay.io/galaxyproject/galaxy-min×6	26.1.1	0027269	2,967
library/nginx	1.22.0	—	not yet scanned
tusproject/tusd	v1.13.0	0520120	1,634

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

442 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	DEBIAN-CVE-2026-58472	wget@1.25.0-2	no fix listed
Low	GHSA-8c25-4j27-2rv3	mistune@3.2.1	3.3.0
Low	GHSA-8mpj-m6qm-5qr8	mistune@3.2.1	3.3.0
Low	GHSA-qc2q-p7wx-3px3	google.golang.org/grpc@v1.57.0	1.83.1
Low	DEBIAN-CVE-2026-73076	vim@2:9.1.1230-2	no fix listed
Low	GHSA-qfrw-5rxm-mhh2	mistune@3.2.1	3.3.0
Low	GO-2023-2382	stdlib@go1.21.0	1.20.12
Low	GHSA-6hx8-3wjj-gr8g	webob@1.8.9	1.8.11
Low	DEBIAN-CVE-2026-73072	vim@2:9.1.1230-2	no fix listed
Low	GHSA-hpj7-wq8m-9hgp	aiohttp@3.13.5	3.14.1
Low	GHSA-qpw4-5x99-6vjp	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.12.0	0.45.0
Low	DEBIAN-CVE-2026-43961	vim@2:9.1.1230-2	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.12.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.0	1.21.8
Low	PYSEC-2026-2214	mistune@3.2.1	3.3.0
Low	DEBIAN-CVE-2026-55895	vim@2:9.1.1230-2	no fix listed
Low	GO-2024-3106	stdlib@go1.21.0	1.22.7
Low	ALPINE-CVE-2023-42364	busybox@1.36.1-r2	1.36.1-r7
Low	PYSEC-2020-216	beaker@1.13.0	no fix listed
Low	ALPINE-CVE-2023-42363	busybox@1.36.1-r2	1.36.1-r7
Low	DEBIAN-CVE-2022-0563	util-linux@2.41-5	no fix listed
Low	PYSEC-2026-2104	aiohttp@3.13.5	3.14.0
Low	GO-2024-2600	stdlib@go1.21.0	1.21.8
Low	DEBIAN-CVE-2026-57456	vim@2:9.1.1230-2	no fix listed
Low	ALPINE-CVE-2023-42366	busybox@1.36.1-r2	1.36.1-r6
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.57.0	1.82.1
Low	GO-2024-2609	stdlib@go1.21.0	1.21.8
Low	GO-2024-3107	stdlib@go1.21.0	1.22.7
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	DEBIAN-CVE-2026-42307	vim@2:9.1.1230-2	no fix listed
Low	ALPINE-CVE-2023-42365	busybox@1.36.1-r2	1.36.1-r7
Low	DEBIAN-CVE-2026-59858	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.41-5	no fix listed
Low	DEBIAN-CVE-2026-25749	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2017-1000382	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.64.0-1.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	5.40.1-6+deb13u1
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	GHSA-h7p7-w5gc-xj3w	pydantic-ai@1.99.0	1.106.0
Low	GHSA-h7p7-w5gc-xj3w	pydantic-ai-slim@1.99.0	1.106.0
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.12.0	0.52.0
Low	GHSA-fh3h-vg37-cc95	webob@1.8.9	1.8.10
Low	DEBIAN-CVE-2026-89158	pcre2@10.46-1~deb13u1	10.46-1~deb13u2
Low	GO-2023-2041	stdlib@go1.21.0	1.20.8
Low	DEBIAN-CVE-2026-55693	vim@2:9.1.1230-2	no fix listed
Low	GO-2023-2043	stdlib@go1.21.0	1.20.8
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2023-2186	stdlib@go1.21.0	1.20.11
Low	DEBIAN-CVE-2026-57455	vim@2:9.1.1230-2	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
6.8.6latest	3 days ago	26.1.1	0547389	4,601
6.8.5	5 days ago	26.1.1	0547389	4,601
6.8.4	16 days ago	26.1.1	0547389	4,601

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/cloudve/galaxy.svg)](https://charts.stackradar.io/charts/cloudve/galaxy)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.