quay.io/galaxyproject/galaxy-min:26.1.1 container image
Quay.ioScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Quay.io all tags of quay.io/galaxyproject/galaxy-min
quay.io/galaxyproject/galaxy-min:26.1.1 resolved to 2c324c9789f5, scanned 14 Sept 2026: 297 findings, 0 critical; deployed by 1 chart, among them galaxy.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
297 distinct on this digest
Findings for digest 2c324c9789f5 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2021-31879 | wget | no fix listed |
| Low | GHSA-xj96-63gp-2gmr | pillow | 12.3.0 |
| Low | GHSA-mgf9-4vpg-hj56 | tornado | 6.5.6 |
| Low | DEBIAN-CVE-2026-80230 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-58469 | wget | no fix listed |
| Low | DEBIAN-CVE-2026-54874 | openssl | 3.5.7-1~deb13u2 |
| Low | DEBIAN-CVE-2026-66035 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-73078 | vim | no fix listed |
| Low | DEBIAN-CVE-2025-69720 | ncurses | no fix listed |
| Low | GHSA-63hw-fmq6-xxg2 | aiohttp | 3.14.1 |
| Low | GHSA-6v7p-g79w-8964 | msgpack | 1.2.1 |
| Low | DEBIAN-CVE-2026-86145 | pcre2 | 10.46-1~deb13u2 |
| Low | DEBIAN-CVE-2026-63075 | openssl | 3.5.7-1~deb13u2 |
| Low | GHSA-xcgm-r5h9-7989 | aiohttp | 3.14.1 |
| Low | GHSA-5rvq-cxj2-64vf | python-multipart | 0.0.30 |
| Low | GHSA-jpw9-pfvf-9f58 | mcp | 1.27.2 |
| Low | DEBIAN-CVE-2026-46483 | vim | no fix listed |
| Low | DEBIAN-CVE-2026-9538 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-58050 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2020-15719 | openldap | no fix listed |
| Low | GHSA-4fvr-rgm6-gqmc | aiohttp | 3.14.1 |
| Low | DEBIAN-CVE-2026-66034 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-82208 | curl | no fix listed |
| Low | GHSA-45hq-cxwh-f6vc | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-47162 | vim | no fix listed |
| Low | DEBIAN-CVE-2026-54411 | pam | no fix listed |
| Low | GHSA-5x94-69rx-g8h2 | pillow | 12.3.0 |
| Low | GHSA-phj9-mv4w-65pm | pillow | 12.3.0 |
| Low | DEBIAN-CVE-2026-42497 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-41992 | gzip | 1.13-1+deb13u1 |
| Low | GHSA-f2ff-p2ww-7p4p | sqlparse | 0.6.0 |
| Low | GHSA-pwgv-4x5q-6m9f | sqlparse | 0.6.0 |
| Low | GHSA-8v84-f9pq-wr9x | pillow | 12.3.0 |
| Low | GHSA-hvrp-rf83-w775 | mcp | 1.27.2 |
| Low | DEBIAN-CVE-2026-12064 | curl | no fix listed |
| Low | GHSA-82w8-qh3p-5jfq | starlette | 1.3.1 |
| Low | DEBIAN-CVE-2026-52859 | vim | no fix listed |
| Low | DEBIAN-CVE-2026-8932 | curl | no fix listed |
| Low | GHSA-3x9g-8vmp-wqvf | tornado | 6.5.6 |
| Low | GHSA-jwv3-5hgf-82ww | cryptography | 49.0.0 |
| Low | DEBIAN-CVE-2026-8286 | curl | no fix listed |
| Low | GHSA-wf93-45jw-7689 | pip | 26.1.2 |
| Low | DEBIAN-CVE-2026-75803 | openssl | 3.5.7-1~deb13u2 |
| Low | GHSA-6r8x-57c9-28j4 | pillow | 12.3.0 |
| Low | GHSA-9hw9-ch79-4vh6 | pillow | 12.3.0 |
| Low | GHSA-jjj6-mw9f-p565 | pillow | 12.3.0 |
| Low | GHSA-xgmm-8j9v-c9wx | pyjwt | 2.13.0 |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.11.1-1+deb13u2 |
| Low | DEBIAN-CVE-2026-48959 | perl | 5.40.1-6+deb13u1 |
| Low | DEBIAN-CVE-2026-5928 | glibc | 2.41-12+deb13u4 |