Rackslab announces the release of Slurm-web v7.1.0, a maintenance update that makes job details accurate for requeued jobs and reused job IDs, keeps the Prometheus metrics endpoint reliable with untyped GPUs, and updates frontend dependencies to fix a large set of published vulnerabilities.
Slurm is a workload manager used to schedule HPC and AI workloads, with advanced features to manage jobs and resources efficiently through a powerful command-line interface (CLI).
Slurm-web provides a clear graphical user interface with views to track your jobs, intuitive insights and advanced visualizations on top of Slurm to monitor your organization’s compute and GPU resources, in a web browser on all your devices.
What’s New?
- Accurate job details for requeued jobs and reused job IDs (#778)
The job details page previously showed the first attempt of a requeued job, with that attempt’s state, times and exit code. It could also show an older job when Slurm issued the same job ID again after the ID range had cycled. Slurm-web now selects the accounting record with the most recent submission time, so the page always reflects the job you are looking for. This issue was initially reported in #752.
- Reliable metrics with untyped GPUs (#769)
On Slurm 25.11 and older, GRES strings of untyped GPUs with topology enabled are
reported as gpu:(null):N. The agent now counts these GPUs correctly, so the
/metrics endpoint keeps responding when nodes are mixed or allocated, and
your Prometheus charts keep flowing.
- Security hardening of the frontend stack
Frontend dependencies were updated to address multiple published
vulnerabilities, including:
CVE-2026-53571, CVE-2026-112942 (vite),
CVE-2026-9697, CVE-2026-9678, CVE-2026-84961, CVE-2026-109869 (undici),
CVE-2026-12143 (form-data),
CVE-2026-42035, CVE-2026-101903, CVE-2026-101906, CVE-2026-101909 (axios),
CVE-2026-13311, CVE-2026-102422 (shell-quote),
GHSA-r28c-9q8g-f849 (postcss),
CVE-2026-13149, CVE-2026-14257, CVE-2026-69152, CVE-2026-102278 (brace-expansion),
CVE-2026-67213 (nanoid), CVE-2026-9358 (postcss-selector-parser),
GHSA-g2v6-rqmx-r4w6 (@vue/server-renderer),
CVE-2026-84373, CVE-2026-112949, CVE-2026-112950 (@vitest/mocker),
CVE-2026-93749 (source-map-js) and
CVE-2026-111755, CVE-2026-111756 (follow-redirects).
We recommend all Slurm-web 7 users upgrade to this release.
Final Notes
We warmly thank the University of Campinas (UNICAMP) for their contributions to this release, as well as all community members who reported issues and helped us track them down.
Support Slurm-web
Slurm-web remains free software under the MIT license, with all features freely available. If Slurm-web is part of your HPC or AI service, there are two ways your organization can help keep the project moving forward.
Become a sponsor. Our sponsorship offer lets your organization fund the engineers building Slurm-web, receive ballots to vote for features on the roadmap and showcase its support with its logo on the project website. Bronze, Silver and Gold levels are available.
Get professional support. Ordering an Enterprise license gives your teams direct access to the Slurm-web developers, with a Service Level Agreement (SLA) and a guaranteed four-hour response during the 8×5 CET support window. OEM licenses are also available for integrators and vendors.