Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

omero-web

6 known vulnerabilities (1 critical, 4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 4 medium
Registry
PyPI

Advisories 6

  • CVE-2025-54791Medium 5.3

    OMERO.web displays unecessary user information when requesting to reset the password

    Affected: fixed in 5.29.2.

  • CVE-2024-35180Medium 6.1

    OMERO.web JSONP callback vulnerability

    Affected: fixed in 5.26.0.

  • CVE-2021-41132Critical 9.8

    Inconsistent input sanitisation leads to XSS vectors

    Affected: fixed in 5.11.0.

  • CVE-2021-21377Medium 4.8

    Open Redirect in OMERO.web

    Affected: fixed in 5.9.0; fixed in 5.9.0.

  • CVE-2021-21376Medium 6.4

    Information Exposure in OMERO.web

    Affected: fixed in 5.9.0; fixed in 5.9.0.

  • OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters.

    Affected: fixed in 5.6.3.