VULNERABILITY INTELLIGENCE

CVE-2026-44371

EPSS probability0.26%
CISA KEVNot currently listed
Published2026-05-14
Last modified2026-10-26

Description

Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixed in 4.0.11, 4.1.5, and 4.2.2.

Weakness classification

  • security-advisories@github.com: CWE-79

Primary references