OSC vulnerabilities
We track 2 vulnerabilities in OSC products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 4, 2026.
2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score
Latest OSC vulnerabilities
- 9.8 Critical severity
ondemand: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Open OnDemand is an open-source high-performance computing portal. The Files application in OnDemand versions prior to 4.0.9 and 4.1.3 is susceptible to malicious input when navigating to a directory. This has been patched in versions 4.0.9 and 4.1.3. Versions
- 7.6 High severity
ondemand: Insufficiently Protected Credentials
Open OnDemand provides remote web access to supercomputers. In versions 4.0.8 and prior, the Apache proxy allows sensitive headers to be passed to origin servers. This means malicious users can create an origin server on a compute node that record these header