0.4.44
7 years ago
15 days ago
Known vulnerabilities in the galaxy-importer package. This does not include vulnerabilities belonging to this package’s dependencies.
Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
galaxy-importer is a Galaxy content importer Affected versions of this package are vulnerable to Improper Input Validation. An attacker could craft a malicious tarball such that a symlink could be dropped on the disk that results in files being overwritten. How to fix Improper Input Validation? Upgrade | [,0.4.17) |