agentprime: osc-ondemandEvery new CVE for osc-ondemand.https://agentprime.io/CVE-2026-44371: Open OnDemand: Specially crafted filenames can execute javascript in the file browserhttps://agentprime.io/advisories/CVE-2026-44371/https://agentprime.io/advisories/CVE-2026-44371/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 15:02:17 GMTCVECVE-2026-26002: OnDemand susceptible to malicious input when navigating to a directory.https://agentprime.io/advisories/CVE-2026-26002/https://agentprime.io/advisories/CVE-2026-26002/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Mar 2026 22:05:28 GMTCVECVE-2025-66029: Open OnDemand affected by Apache proxy passing sensitive headershttps://agentprime.io/advisories/CVE-2025-66029/https://agentprime.io/advisories/CVE-2025-66029/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Dec 2025 22:32:51 GMTCVECVE-2025-64185: Open OnDemand RPM packages create world writable locationshttps://agentprime.io/advisories/CVE-2025-64185/https://agentprime.io/advisories/CVE-2025-64185/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Nov 2025 16:58:01 GMTCVECVE-2025-62724: Open OnDemand allowlist bypass using symlinks in directory downloads (TOCTOU)https://agentprime.io/advisories/CVE-2025-62724/https://agentprime.io/advisories/CVE-2025-62724/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Nov 2025 16:53:13 GMTCVECVE-2025-58435: Open OnDemand didn't rotate password for VNC batch_connecthttps://agentprime.io/advisories/CVE-2025-58435/https://agentprime.io/advisories/CVE-2025-58435/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 09 Sep 2025 19:43:47 GMTCVECVE-2025-53636: Open OnDemand Shell App closed websocket DoShttps://agentprime.io/advisories/CVE-2025-53636/https://agentprime.io/advisories/CVE-2025-53636/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jul 2025 21:20:14 GMTCVE