galaxyproject — Vulnerabilities & Security Advisories 5

Galaxyproject is an open-source platform for scientific workflow management and data analysis, primarily used in bioinformatics and research communities. Historically, it has faced vulnerabilities including remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and insecure default configurations. The project has addressed these through regular security patches and improved documentation. While no major public security incidents have been widely reported, the presence of five CVEs indicates ongoing security challenges typical of web-based scientific tools that handle sensitive research data and enable complex computational workflows.