Malicious code in ivy-volcano-085d (npm)

The package ivy-volcano-085d was found to contain malicious code...

Malicious code in volcano-fennel-s2pq (npm)

The package volcano-fennel-s2pq was found to contain malicious code...

MAL-2025-38557 Malicious code in volcano-boulder-dor911-project (npm)

The package volcano-boulder-dor911-project was found to contain malicious code...

Malicious code in volcano-falcon-olm559-project (npm)

The package volcano-falcon-olm559-project was found to contain malicious code...

MAL-2025-21425 Malicious code in ginkgo-volcano-agyo (npm)

The package ginkgo-volcano-agyo was found to contain malicious code...

MAL-2025-24193 Malicious code in kaleidoscope-volcano-qin433-project (npm)

The package kaleidoscope-volcano-qin433-project was found to contain malicious code...

MAL-2025-40744 Malicious code in zamia-volcano-hlxo (npm)

The package zamia-volcano-hlxo was found to contain malicious code...

MAL-2025-26365 Malicious code in mike-volcano-atvw (npm)

The package mike-volcano-atvw was found to contain malicious code...

Malicious code in albatross-volcano-knk019-project (npm)

The package albatross-volcano-knk019-project was found to contain malicious code...

MAL-2025-38564 Malicious code in volcano-kite-kwh318-project (npm)

The package volcano-kite-kwh318-project was found to contain malicious code...

Malicious code in xenon-volcano-9j04 (npm)

The package xenon-volcano-9j04 was found to contain malicious code...

CVE-2024-36533

Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

SUSE CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

GO-2025-3656 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano

Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano...

CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling when using either the Elastic service or the extender plugin. An attacker can cause the scheduler to crash or become completely unavailable to the cluster. This is only exploitable if...

CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

CVE-2025-32777

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...

CVE-2025-32777 Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin

Volcano is a Kubernetes-native batch scheduling system. Prior to versions 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2, attacker compromise of either the Elastic service or the extender plugin can cause denial of service of the scheduler. This is a privilege...