Search CVE reports

[Fix various issues around job steps and node count discrepancies]

[Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database]

[Fix various issues in unsafe operation/queries to the slurmdbd]

[Fix heap over-read when unpacking a malformed forward data RPC in slurmd. Fix a slurmd crash when handling a malformed forward data RPC with a missing socket address]

[Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix slurmstepd leaving OCI container spool directories behind when ContainerPath contains a task id pattern]

[Fix a slurmstepd stack overflow when a job environment contains an oversized SPANK option variable]

[Fix sbcast shared objects skipping credential verification, Fix possible slurmd crash on invalid sbcast filenames]

In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator.

The WP Private Content Plus plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.6.2 via the 'validate_restrictions' function. This makes it possible for unauthenticated...

SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with...