PyPI/omero-web CVE-2021-41132: critical 9.8, EPSS 1.04%

Inconsistent input sanitisation leads to XSS vectors

Action: Upgrade omero-web to 5.11.0 or later.

pip install omero-web==5.11.0

Affected

Fixed versions

Sources

• osv: GHSA-g67g-hvc3-xmvf
• https://github.com/ome/omero-web/security/advisories/GHSA-g67g-hvc3-xmvf
• https://nvd.nist.gov/vuln/detail/CVE-2021-41132
• https://github.com/ome/omero-web/commit/0168067accde5e635341b3c714b1d53ae92ba424
• https://github.com/ome/omero-web
• https://github.com/pypa/advisory-database/tree/main/vulns/omero-figure/PYSEC-2021-379.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-372.yaml
• https://www.openmicroscopy.org/security/advisories/2021-SV3

CVE-2021-41132 · published 2021-10-14T21:19:23Z · modified 2026-07-08T06:29:19.719716201Z · JSON