PyPI/omero-web CVE-2021-21377: medium 4.8, EPSS 0.83%

OMERO webclient does not validate URL redirects on login or switching group.

Action: Upgrade omero-web to 5.9.0 or later.

pip install omero-web==5.9.0

Affected

Fixed versions

Sources

• osv: GHSA-g4rf-pc26-6hmr
• https://github.com/ome/omero-web/security/advisories/GHSA-g4rf-pc26-6hmr
• https://nvd.nist.gov/vuln/detail/CVE-2021-21377
• https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c
• https://github.com/ome/omero-web
• https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021
• https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-32.yaml
• https://pypi.org/project/omero-web
• https://www.openmicroscopy.org/security/advisories/2021-SV2

CVE-2021-21377 · published 2021-03-23T15:26:49Z · modified 2026-07-08T06:27:39.407297766Z · JSON