140 matches found
MAL-2025-38571 Malicious code in volcano-tundra-pkn173-project (npm)
The package volcano-tundra-pkn173-project was found to contain malicious code...
MAL-2025-26105 Malicious code in meadow-volcano-snc198-project (npm)
The package meadow-volcano-snc198-project was found to contain malicious code...
Malicious code in quasar-volcano-spn287-project (npm)
The package quasar-volcano-spn287-project was found to contain malicious code...
MAL-2025-38576 Malicious code in volcano-xerox-kdw602-project (npm)
The package volcano-xerox-kdw602-project was found to contain malicious code...
MAL-2025-40957 Malicious code in zest-volcano-nclk (npm)
The package zest-volcano-nclk was found to contain malicious code...
MAL-2025-32297 Malicious code in river-volcano-srq745-project (npm)
The package river-volcano-srq745-project was found to contain malicious code...
MAL-2025-39675 Malicious code in xenon-volcano-9j04 (npm)
The package xenon-volcano-9j04 was found to contain malicious code...
MAL-2025-37693 Malicious code in umbrella-volcano-sam037-project (npm)
The package umbrella-volcano-sam037-project was found to contain malicious code...
MAL-2025-40064 Malicious code in xylophone-volcano-qmw136-project (npm)
The package xylophone-volcano-qmw136-project was found to contain malicious code...
CVE-2024-36533
Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...
SUSE CVE-2025-32777
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
GO-2025-3656 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano...
CVE-2025-32777
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...
CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Impact This issue allows an attacker who has compromised either the Elastic service or the extender plugin to cause denial of service of the scheduler. This is a privilege escalation, because Volcano users may run their Elastic service and extender plugins in separate pods or nodes from the...
Volcano 安全漏洞
Volcano is a batch processing system built on Kubernetes by Volcano Open Source. A security vulnerability exists in Volcano versions prior to 1.11.2, which stems from a service or plugin being under the control of an attacker and could lead to a denial of service and elevation of privilege...