MEDIUM5.4
PYSEC-2024-272
Quick fix
PYSEC-2024-272 — galaxy-auth: upgrade to the fixed version with the command below.
pip install --upgrade 'galaxy-auth>=24.1.1'Details
Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations endpoint, can be used to store HTML tags and trigger javascript execution upon edit operation. All supported branches of Galaxy (and more back to release_20.05) were amended with the supplied patches. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Are you affected?
Enter the version of the package you're using.