pkg:PyPI/omero-web

All known vulnerabilities

• CRITICAL9.8CVE-2021-41132Inconsistent input sanitisation leads to XSS vectors
  from 0, < 5.11.0
• MEDIUM6.4CVE-2021-21376OMERO.web exposes some unnecessary session information in the page
  from 0, < 5.9.0
• MEDIUM6.4CVE-2021-21376OMERO.web exposes some unnecessary session information in the page
  from 0, < 952f8e5d28532fbb14fb665982211329d137908c | from 0, < 5.9.0
• MEDIUM6.1OMERO.web must check that the JSONP callback is a valid function
  from 0, < 5.26.0
• MEDIUM6.1OMERO.web must check that the JSONP callback is a valid function
  from 0, < 5.26.0
• MEDIUM5.7OMERO-web Sensitive Data Exposure
  from 0, < 5.6.3
• MEDIUM5.7OMERO-web Sensitive Data Exposure
  from 0, < 5.6.3
• MEDIUM5.3OMERO.web displays unecessary user information when requesting password reset
  from 0, < 5.29.2
• MEDIUM5.3OMERO.web displays unecessary user information when requesting password reset
  from 0, < 5.29.2
• MEDIUM4.8OMERO webclient does not validate URL redirects on login or switching group.
  from 0, < 5.9.0