MAL-2025-32297 Malicious code in river-volcano-srq745-project (npm)

The package river-volcano-srq745-project was found to contain malicious code...

MAL-2025-38559 Malicious code in volcano-falcon-olm559-project (npm)

The package volcano-falcon-olm559-project was found to contain malicious code...

MAL-2025-21425 Malicious code in ginkgo-volcano-agyo (npm)

The package ginkgo-volcano-agyo was found to contain malicious code...

MAL-2025-38566 Malicious code in volcano-maple-vsk3 (npm)

The package volcano-maple-vsk3 was found to contain malicious code...

MAL-2025-38571 Malicious code in volcano-tundra-pkn173-project (npm)

The package volcano-tundra-pkn173-project was found to contain malicious code...

MAL-2025-33941 Malicious code in star-volcano-sfm016-project (npm)

The package star-volcano-sfm016-project was found to contain malicious code...

MAL-2025-26365 Malicious code in mike-volcano-atvw (npm)

The package mike-volcano-atvw was found to contain malicious code...

MAL-2025-26105 Malicious code in meadow-volcano-snc198-project (npm)

The package meadow-volcano-snc198-project was found to contain malicious code...

MAL-2025-38568 Malicious code in volcano-nebula-lsp8 (npm)

The package volcano-nebula-lsp8 was found to contain malicious code...

MAL-2025-37693 Malicious code in umbrella-volcano-sam037-project (npm)

The package umbrella-volcano-sam037-project was found to contain malicious code...

MAL-2025-39675 Malicious code in xenon-volcano-9j04 (npm)

The package xenon-volcano-9j04 was found to contain malicious code...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

SUSE CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

GO-2025-3656 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano

Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano...

CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...

CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Impact This issue allows an attacker who has compromised either the Elastic service or the extender plugin to cause denial of service of the scheduler. This is a privilege escalation, because Volcano users may run their Elastic service and extender plugins in separate pods or nodes from the...