Volcano-sh vulnerabilities
We track 2 vulnerabilities in Volcano-sh products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest Volcano-sh vulnerabilities
- 7.4 High severity
volcano: Uncontrolled Resource Consumption
Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitra
- 8.2 High severity
volcano: Allocation of Resources Without Limits or Throttling
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the