Ganglia Web 3.5.6 has been released. Major changes are

• Number of fixes to address XSS (Cross Site Scripting) issues
• Enhancement to the host view if use option “metric_groups_initially_collapsed”. Clicking on metric groups dynamically loads images instead of reloading the page
• Incorporate legend in the selection when doing Inspect graph

If you are using Ganglia Web on a publicly available site you are advised to upgrade as soon as possible. Release notes can be found here https://github.com/ganglia/ganglia-web/wiki/Release-Notes

Download the release from https://sourceforge.net/projects/ganglia/files/ganglia-web/3.5.6/