ome/omero-web Security Advisories | GitStock

low2025-11-24

OMERO.web uses jquery-form library, which may be vulnerable to XSS attack

GHSA-j4gv-6x9v-v23g

medium2025-08-13

OMERO.web displays unecessary user information when requesting password reset

GHSA-gpmg-4x4g-mr5r · CVE-2025-54791

medium2024-05-21

OMERO.web must check that the JSONP callback is a valid function

GHSA-vr85-5pwx-c6gq · CVE-2024-35180

medium2022-05-24

OMERO-web Sensitive Data Exposure

GHSA-vwxv-frj6-fhc9 · CVE-2020-7932

critical2021-10-14

Inconsistent input sanitisation leads to XSS vectors

GHSA-g67g-hvc3-xmvf · CVE-2021-41132

medium2021-03-23

OMERO webclient does not validate URL redirects on login or switching group.

GHSA-g4rf-pc26-6hmr · CVE-2021-21377

high2021-03-23

OMERO.web exposes some unnecessary session information in the page

GHSA-gfp2-w5jm-955q · CVE-2021-21376