What is the CVSS score of CVE-2025-53636?

CVE-2025-53636 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Open OnDemand are affected by CVE-2025-53636?

Organizations using Open OnDemand should be aware of moderate risk from CVE-2025-53636, a resource exhaustion vulnerability rated CVSS 5.4. Service availability could be impacted.. A patch is available.

How to fix or mitigate CVE-2025-53636?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Open OnDemand CVE-2025-53636

EUVD-2025-21186 MEDIUM

Uncontrolled Resource Consumption (CWE-400)

2025-07-11 security-advisories@github.com

Denial Of Service

5.4

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

3.1.14,4.0.6

EUVD ID Assigned

Mar 16, 2026 - 08:18 euvd

EUVD-2025-21186

Analysis Generated

Mar 16, 2026 - 08:18 vuln.today

CVE Published

Jul 11, 2025 - 22:15 nvd

MEDIUM 5.4

DescriptionGitHub Advisory

Open OnDemand is an open-source HPC portal. Users can flood logs by interacting with the shell app and generating many errors. Users who flood logs can create very large log files causing a Denial of Service (DoS) to the ondemand system. This vulnerability is fixed in 3.1.14 and 4.0.6.

Analysis

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400).