{"action":"Upgrade omero-figure to 4.4.1 or later.","affected":[{"fixed":"4.4.1","introduced":"0"}],"component":"omero-figure","cve_ids":["CVE-2021-41132"],"ecosystem":"PyPI","epss":0.01039,"exploited":false,"fixed_versions":["4.4.1"],"ghsa_id":"GHSA-g67g-hvc3-xmvf","id":"tcs_01M5KFGYMRKH739N4AP9H8RBQN","modified_at":"2026-07-08T06:29:19.719716201Z","published_at":"2021-10-14T21:19:23Z","references":["https://osv.dev/vulnerability/GHSA-g67g-hvc3-xmvf","https://github.com/ome/omero-web/security/advisories/GHSA-g67g-hvc3-xmvf","https://nvd.nist.gov/vuln/detail/CVE-2021-41132","https://github.com/ome/omero-web/commit/0168067accde5e635341b3c714b1d53ae92ba424","https://github.com/ome/omero-web","https://github.com/pypa/advisory-database/tree/main/vulns/omero-figure/PYSEC-2021-379.yaml","https://github.com/pypa/advisory-database/tree/main/vulns/omero-web/PYSEC-2021-372.yaml","https://www.openmicroscopy.org/security/advisories/2021-SV3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-g67g-hvc3-xmvf#PyPI/omero-figure","url":"https://osv.dev/vulnerability/GHSA-g67g-hvc3-xmvf"}],"summary":"Inconsistent input sanitisation leads to XSS vectors"}