CVE-2025-53636

Impact

Open OnDemand is an open-source HPC portal. Users can flood logs by interacting with the shell app and generating many errors. Users who flood logs can create very large log files causing a Denial of Service (DoS) to the ondemand system. This vulnerability is fixed in 3.1.14 and 4.0.6.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/OSC/ondemand/commit/40800d68cd019c5f1c48b2deafebba6dff4abee2
• https://github.com/OSC/ondemand/commit/96f29b995e1add7562516614e4dc8d961987e8b4
• https://github.com/OSC/ondemand/security/advisories/GHSA-x5xv-fw37-v524