MEDIUM5.3PyPI
PYSEC-2026-1717· CVE-2025-54791, GHSA-gpmg-4x4g-mr5rOMERO.web displays unecessary user information when requesting password reset
Modified: 7/7/2026
package
PyPI/omero-web
pkg:pypi/omero-web
MEDIUM6.1PyPI
PYSEC-2026-1718· CVE-2024-35180, GHSA-vr85-5pwx-c6gqOMERO.web must check that the JSONP callback is a valid function
Modified: 7/7/2026
MEDIUM4.8PyPI
GHSA-g4rf-pc26-6hmr· CVE-2021-21377, PYSEC-2021-32OMERO webclient does not validate URL redirects on login or switching group.
Modified: 7/8/2026
CRITICAL9.8PyPI
GHSA-g67g-hvc3-xmvf· CVE-2021-41132, PYSEC-2021-372Inconsistent input sanitisation leads to XSS vectors
Modified: 7/8/2026
MEDIUM6.4PyPI
GHSA-gfp2-w5jm-955q· CVE-2021-21376, PYSEC-2021-31OMERO.web exposes some unnecessary session information in the page
Modified: 9/10/2026
MEDIUM5.3PyPI
GHSA-gpmg-4x4g-mr5r· CVE-2025-54791, PYSEC-2026-1717OMERO.web displays unecessary user information when requesting password reset
Modified: 7/7/2026
LOWPyPI
GHSA-j4gv-6x9v-v23gOMERO.web uses jquery-form library, which may be vulnerable to XSS attack
Modified: 11/24/2025
MEDIUM6.1PyPI
GHSA-vr85-5pwx-c6gq· CVE-2024-35180, PYSEC-2026-1718OMERO.web must check that the JSONP callback is a valid function
Modified: 9/10/2026
MEDIUM5.7PyPI
GHSA-vwxv-frj6-fhc9· CVE-2020-7932, PYSEC-2020-244OMERO-web Sensitive Data Exposure
Modified: 10/7/2024
—PyPI
PYSEC-2020-244· CVE-2020-7932, GHSA-vwxv-frj6-fhc9Modified: 6/10/2026
—PyPI
PYSEC-2021-31· CVE-2021-21376, GHSA-gfp2-w5jm-955qModified: 11/8/2023
—PyPI
PYSEC-2021-32· CVE-2021-21377, GHSA-g4rf-pc26-6hmrModified: 11/8/2023
—PyPI
PYSEC-2021-372· CVE-2021-41132, GHSA-g67g-hvc3-xmvfModified: 11/8/2023