OSC CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM OSC CVE published 2026-05-14

CVE-2026-44371

Open OnDemand, an open-source high-performance computing portal, had a vulnerability prior to versions 4.0.11, 4.1.5, and 4.2.2. The issue allowed specially crafted filenames to execute JavaScript in the file browser. This vulnerability is fixed in versions 4.0.11, 4.1.5, and 4.2.2. Defenders managing Open OnDemand instances, especially those with user-uploaded files or public file browsers, should assess [truncated]