{"action":"Upgrade omero-web to 5.29.3 or later.","affected":[{"fixed":"5.29.3","introduced":"0"}],"component":"omero-web","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["5.29.3"],"ghsa_id":"GHSA-j4gv-6x9v-v23g","id":"tcs_01M5KFN20ZFXSWMYXMJ9F0BZ9D","modified_at":"2025-11-24T23:44:53.696109Z","published_at":"2025-11-24T23:35:30Z","references":["https://osv.dev/vulnerability/GHSA-j4gv-6x9v-v23g","https://github.com/ome/omero-web/security/advisories/GHSA-j4gv-6x9v-v23g","https://github.com/jquery-form/form/issues/604","https://github.com/ome/omero-web/commit/a3eadf722cfada2b844b97abe65baf5856e77c4f","https://github.com/ome/omero-web"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-j4gv-6x9v-v23g","url":"https://osv.dev/vulnerability/GHSA-j4gv-6x9v-v23g"}],"summary":"OMERO.web uses jquery-form library, which may be vulnerable to XSS attack"}