Every CVE whose affected-product data names Galaxyproject Galaxy, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (7)
CVE-2023-27578 — CVSS 9.1 (critical): Galaxy is an open-source platform for data analysis. All supported versions of Galaxy are affected prior to 22.01, 22.05, and 23.0 are…
CVE-2022-23470 — CVSS 8.6 (high): Galaxy is an open-source platform for data analysis. An arbitrary file read exists in Galaxy 22.01 and Galaxy 22.05 due to the switch to…
CVE-2024-42346 — CVSS 7.6 (high): Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing…
CVE-2024-42351 — CVSS 6.5 (medium): Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing…
CVE-2023-42812 — CVSS 6.3 (medium): Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery…
CVE-2018-1000516 — CVSS 6.1 (medium): The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in…
CVE-2015-10062 — CVSS 5.5 (medium): A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the…