{"action":"Upgrade galaxy-data to 24.1.1 or later.","affected":[{"fixed":"24.1.1","introduced":"0"}],"component":"galaxy-data","cve_ids":["CVE-2024-42346"],"ecosystem":"PyPI","epss":0.00768,"exploited":false,"fixed_versions":["24.1.1"],"ghsa_id":"GHSA-x6w7-3gwf-qr9r","id":"tcs_01M5KGMVVMB0Q0JSGJJW8H68S2","modified_at":"2026-05-20T09:19:00.901252Z","published_at":"2024-09-20T19:15:15.547Z","references":["https://osv.dev/vulnerability/PYSEC-2024-273","https://github.com/galaxyproject/galaxy/security/advisories/GHSA-x6w7-3gwf-qr9r"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"PYSEC-2024-273","url":"https://osv.dev/vulnerability/PYSEC-2024-273"}],"summary":"Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations end"}