140 matches found
MAL-2025-21425 Malicious code in ginkgo-volcano-agyo (npm)
The package ginkgo-volcano-agyo was found to contain malicious code...
MAL-2025-38568 Malicious code in volcano-nebula-lsp8 (npm)
The package volcano-nebula-lsp8 was found to contain malicious code...
MAL-2025-38566 Malicious code in volcano-maple-vsk3 (npm)
The package volcano-maple-vsk3 was found to contain malicious code...
MAL-2025-23499 Malicious code in ivy-volcano-085d (npm)
The package ivy-volcano-085d was found to contain malicious code...
MAL-2025-26365 Malicious code in mike-volcano-atvw (npm)
The package mike-volcano-atvw was found to contain malicious code...
MAL-2025-38571 Malicious code in volcano-tundra-pkn173-project (npm)
The package volcano-tundra-pkn173-project was found to contain malicious code...
MAL-2025-33941 Malicious code in star-volcano-sfm016-project (npm)
The package star-volcano-sfm016-project was found to contain malicious code...
MAL-2025-40957 Malicious code in zest-volcano-nclk (npm)
The package zest-volcano-nclk was found to contain malicious code...
MAL-2025-38576 Malicious code in volcano-xerox-kdw602-project (npm)
The package volcano-xerox-kdw602-project was found to contain malicious code...
CVE-2024-36533
Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
SUSE CVE-2025-32777
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
GO-2025-3656 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano...
CVE-2025-32777
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...
CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Impact This issue allows an attacker who has compromised either the Elastic service or the extender plugin to cause denial of service of the scheduler. This is a privilege escalation, because Volcano users may run their Elastic service and extender plugins in separate pods or nodes from the...
Volcano 安全漏洞
Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano versions prior to 1.11.2, which stems from a service or plugin being under the control of an attacker and could lead to a denial of service and elevation of privilege...