Open Microscopy Environment vulnerabilities
We track 2 vulnerabilities in Open Microscopy Environment products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest Open Microscopy Environment vulnerabilities
- 7.8 High severity
Bio-Formats: Deserialization of Untrusted Data
Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated with
- 7.1 High severity
Bio-Formats: Improper Restriction of XML External Entity Reference
Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF). The parser uses an insecurely configured DocumentBuilderFactory when processing Leica XML-based