{"action":"Upgrade omero-web to 5.11.0 or later.","affected":[{"fixed":"5.11.0","introduced":"0"}],"component":"omero-web","cve_ids":["CVE-2021-41132"],"ecosystem":"PyPI","epss":0.01039,"exploited":false,"fixed_versions":["5.11.0"],"ghsa_id":"GHSA-g67g-hvc3-xmvf","id":"tcs_01M5KGCN3CP9YTH4232Q4SCT8E","modified_at":"2023-11-08T04:06:52.354646Z","published_at":"2021-10-14T16:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2021-372","https://github.com/ome/omero-web/security/advisories/GHSA-g67g-hvc3-xmvf","https://www.openmicroscopy.org/security/advisories/2021-SV3/","https://github.com/ome/omero-web/commit/0168067accde5e635341b3c714b1d53ae92ba424"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2021-372","url":"https://osv.dev/vulnerability/PYSEC-2021-372"}],"summary":"OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of saniti"}