https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-42351.htmlhttps://patchthecve.com/cve/CVE-2024-42351.htmlWed, 17 Jun 2026 07:49:18 +0000MEDIUM 6.5: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the contents of public datasets resulting in data loss or tampering. All supported branches of Galaxy (and mohttps://patchthecve.com/cve/CVE-2024-42346.htmlhttps://patchthecve.com/cve/CVE-2024-42346.htmlWed, 17 Jun 2026 07:49:18 +0000HIGH 7.6: Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supphttps://patchthecve.com/cve/CVE-2023-42812.htmlhttps://patchthecve.com/cve/CVE-2023-42812.htmlWed, 17 Jun 2026 06:24:34 +0000MEDIUM 6.3: Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious to issue arbitrary HTTP/HTTPS requests from the application server to internal hosts and read their responses. Version 22.05 contains a patc