PyPI/omero-web CVE-2021-21376: medium 6.4, EPSS 1.46%

OMERO.web exposes some unnecessary session information in the page

Action: Upgrade omero-web to 5.9.0 or later.

pip install omero-web==5.9.0

Affected

Fixed versions

Sources

• osv: GHSA-gfp2-w5jm-955q
• https://github.com/ome/omero-web/security/advisories/GHSA-gfp2-w5jm-955q
• https://nvd.nist.gov/vuln/detail/CVE-2021-21376
• https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c
• https://github.com/ome/omero-web
• https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021
• https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-31.yaml
• https://pypi.org/project/omero-web
• https://www.openmicroscopy.org/security/advisories/2021-SV1

CVE-2021-21376 · published 2021-03-23T15:26:34Z · modified 2026-09-10T03:49:02.354810513Z · JSON