Skip to main content
cve.nowby Sazabi
← Go
GoPackage

volcano.sh/volcano

3 known vulnerabilities (1 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 1 high, 1 medium
Registry
pkg.go.dev

Advisories 3

  • CVE-2026-44247Medium 6.8

    Volcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size

    Affected: fixed in 1.12.4; from 1.13.0, fixed in 1.13.3; from 1.14.0, fixed in 1.14.2; fixed in 1.12.4; from 1.13.0, fixed in 1.13.3; from 1.14.0, fixed in 1.14.2.

  • Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

    Affected: fixed in 1.9.1; from 1.10.0-alpha.0, fixed in 1.10.2; from 1.11.0-network-topology-preview.0, fixed in 1.11.0-network-topology-preview.3; from 1.11.0, fixed in 1.11.2; from 1.12.0-alpha.0, fixed in 1.12.0-alpha.2; fixed in 1.9.1; from 1.10.0-alpha.0, fixed in 1.10.2; from 1.11.0-network-topology-preview.0, fixed in 1.11.0-network-topology-preview.3; from 1.11.0, fixed in 1.11.2; from 1.12.0-alpha.0, fixed in 1.12.0-alpha.2.

  • CVE-2024-36533Critical 9.8

    Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service…

    Affected: fixed in 1.10.0-alpha.0.