volcano vulnerabilities

2 known vulnerabilities in volcano from Volcano-sh. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  volcano: Uncontrolled Resource Consumption

  CVE-2026-44247May 27, 2026Volcano-sh

  Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitra

• 8.2 High severity

  volcano: Allocation of Resources Without Limits or Throttling

  CVE-2025-32777Apr 30, 2025Volcano-sh

  Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the