Osc Open_ondemand
3 CVEs affecting Osc Open_ondemand. Latest disclosed: 2026-03-04. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-26002 | Critical | 9.8 | 2026-03-04 | Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malici… |
CVE-2020-36247 | High | 8.8 | 2021-02-19 | Open OnDemand before 1.5.7 and 1.6.x before 1.6.22 allows CSRF. |
CVE-2025-66029 | High | 7.6 | 2025-12-17 | Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin serve… |