All products

omero-web

PyPI · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OMERO.web must check that the JSONP callback is a valid functionCVE-2024-35180 · GHSA-VR85-5PWX-C6GQVersion ranges need review. omero-web PyPI Medium Fix reported
OMERO.web exposes some unnecessary session information in the pageCVE-2021-21376 · GHSA-GFP2-W5JM-955QVersion ranges need review. omero-web PyPI High Fix reported
Inconsistent input sanitisation leads to XSS vectorsCVE-2021-41132 · GHSA-G67G-HVC3-XMVFVersion ranges need review. omero-figureomero-web PyPI Critical Fix reported
OMERO webclient does not validate URL redirects on login or switching group.CVE-2021-21377 · GHSA-G4RF-PC26-6HMRVersion ranges need review. omero-web PyPI Medium Fix reported
OMERO.web displays unecessary user information when requesting password resetCVE-2025-54791 · GHSA-GPMG-4X4G-MR5RVersion ranges need review. omero-web PyPI Medium Fix reported
OMERO-web Sensitive Data ExposureCVE-2020-7932 · GHSA-VWXV-FRJ6-FHC9Version ranges need review. omero-web PyPI Medium Fix reported
OMERO.web uses jquery-form library, which may be vulnerable to XSS attackGHSA-J4GV-6X9V-V23G omero-web PyPI Low Fix reported