CRITICAL9.8Go
GHSA-5g3x-8g2v-r8x8· CVE-2024-36533, GO-2024-3034Volcano has insecure permissions
Modified: 8/7/2024
package
Go/volcano.sh/volcano
pkg:go/volcano.sh/volcano
MEDIUM6.8Go
GHSA-8wxp-xxp2-rcgx· CVE-2026-44247, GO-2026-5269Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size
Modified: 6/25/2026
HIGHGo
GHSA-hg79-fw4p-25p8· CVE-2025-32777, GO-2025-3656Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin
Modified: 5/6/2025
—Go
GO-2024-3034· CVE-2024-36533, GHSA-5g3x-8g2v-r8x8Volcano has insecure permissions in volcano.sh/volcano
Modified: 3/3/2026
—Go
GO-2025-3656· CVE-2025-32777, GHSA-hg79-fw4p-25p8Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano
Modified: 3/3/2026
—Go
GO-2026-5269· CVE-2026-44247, GHSA-8wxp-xxp2-rcgxVolcano's webhook server vulnerable to OOM due to unbounded HTTP request body size in volcano.sh/volcano
Modified: 6/25/2026