Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:47:02 +0000 CVE-2021-41132 — Inconsistent input sanitisation leads to XSS vectors https://cve.radiocsirt.org/vuln/cve-2021-41132 <p><strong>Affected:</strong> omero-web</p> <p>OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host of cross-site scripting possibilities with specially crafted input to a variety of fields. This issue is patched in version 5.11.0. There are no known workarounds aside from upgrading.</p> <p><strong>Affected:</strong> omero-web</p> <p>OMERO.web provides a web based client and plugin infrastructure. In versions prior to 5.11.0, a variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host of cross-site scripting possibilities with specially crafted input to a variety of fields. This issue is patched in version 5.11.0. There are no known workarounds aside from upgrading.</p> https://cve.radiocsirt.org/vuln/cve-2021-41132 GHSA-g67g-hvc3-xmvf — Inconsistent input sanitisation leads to XSS vectors https://cve.radiocsirt.org/vuln/ghsa-g67g-hvc3-xmvf <p><strong>Affected:</strong> PyPI: omero-web, PyPI: omero-figure</p> <p>### Background</p> <p>A variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host of XSS possibilities with specially crafted input to a variety of fields.</p> <p>### Impact</p> <p>OMERO.web before 5.11.0 and OMERO.figure before 4.4.1.</p> <p>### Patches Users should upgrade OMERO.web to 5.11.0 or higher and OMERO.figure to 4.4.1 or higher.</p> <p><strong>Affected:</strong> PyPI: omero-web, PyPI: omero-figure</p> <p>### Background</p> <p>A variety of templates do not perform proper sanitization through HTML escaping. Due to the lack of sanitization and use of ``jQuery.html()``, there are a whole host of XSS possibilities with specially crafted input to a variety of fields.</p> <p>### Impact</p> <p>OMERO.web before 5.11.0 and OMERO.figure before 4.4.1.</p> <p>### Patches Users should upgrade OMERO.web to 5.11.0 or higher and OMERO.figure to 4.4.1 or higher.</p> https://cve.radiocsirt.org/vuln/ghsa-g67g-hvc3-xmvf