https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T18:00:35.871610+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-22195 EUVD-2026-22195 2026-10-04T18:00:35.970482+00:00 EUVD-2026-22195 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21376 fkie_cve-2021-21376 2026-10-04T18:00:35.970531+00:00

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0.

 https://cve.radiocsirt.org/vuln/ghsa-gfp2-w5jm-955q GHSA-gfp2-w5jm-955q — OMERO.web exposes some unnecessary session information in the page 2026-10-04T18:00:35.970574+00:00

Affected: PyPI: omero-web

### Background OMERO.web loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. Some additional information being loaded is not used by the webclient and is being removed in this release.

### Impact OMERO.web before 5.9.0

### Patches 5.9.0

### Workarounds No workaround

### References

### For more information If you have any questions or comments about this advisory: * Open an issue in [omero-web](https://github.com/ome/omero-web) * Email us at [security](mailto:security@openmicroscopy.org.uk)

 https://cve.radiocsirt.org/vuln/gsd-2021-21376 gsd-2021-21376 2026-10-04T18:00:35.970608+00:00 gsd-2021-21376 https://cve.radiocsirt.org/vuln/pysec-2021-31 PYSEC-2021-31 2026-10-04T18:00:35.970621+00:00

Affected: PyPI: omero-web

OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0.