—
GO-2025-3656
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano
Quick fix
GO-2025-3656 — volcano.sh/volcano: upgrade to the fixed version with the command below.
go get volcano.sh/volcano@v1.9.1Details
Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin in volcano.sh/volcano
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/volcano-sh/volcano/security/advisories/GHSA-hg79-fw4p-25p8[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2025-32777[ADVISORY]
- https://github.com/volcano-sh/volcano/commit/45a4347471a5254121d10afef04c6732095fa398[WEB]
- https://github.com/volcano-sh/volcano/commit/7103c18de19821cd278f949fa24c13da350a8c5d[WEB]
- https://github.com/volcano-sh/volcano/commit/735842af59b9be0da5090677db7693c98a798b2a[WEB]
- https://github.com/volcano-sh/volcano/commit/7c0ea53fa3cfa7a05b5fba7a8af7bfe88adc41c3[WEB]
- https://github.com/volcano-sh/volcano/commit/d687f75a11fa36f37b54e4b6ff8e49bc0a3ca6b4[WEB]
- https://github.com/volcano-sh/volcano/releases/tag/v1.10.2[WEB]
- https://github.com/volcano-sh/volcano/releases/tag/v1.11.0-network-topology-preview.3[WEB]
- https://github.com/volcano-sh/volcano/releases/tag/v1.11.2[WEB]
- https://github.com/volcano-sh/volcano/releases/tag/v1.12.0-alpha.2[WEB]
- https://github.com/volcano-sh/volcano/releases/tag/v1.9.1[WEB]