Missing Authorization Affecting galaxy-web-apps package, versions [,25.1.dev0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsSnyk Learn
Learn about Missing Authorization vulnerabilities in an interactive lesson.
Start learning- Snyk IDSNYK-PYTHON-GALAXYWEBAPPS-14859127
- published4 Jan 2026
- disclosed1 Jan 2026
- creditUnknown
Introduced: 1 Jan 2026
CVE NOT AVAILABLE CWE-862 (opens in a new tab)Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade galaxy-web-apps to version 25.1.dev0 or higher.
Overview
galaxy-web-apps is a Galaxy web apps
Affected versions of this package are vulnerable to Missing Authorization in the create() function in visualizations.py.An anonymous user can create visualizations.