Skip to content
OpenAdvisories

Vendor

volcano-sh

2 known vulnerabilities.

Products

volcano 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-44247

    Volcano: Webhook server vulnerable to OOM due to unbounded HTTP request body size

    Volcano is a Kubernetes-native batch scheduling system. Prior to v1.14.2, v1.13.3, and v1.12.4, the Volcano webhook server does not enforce a size limit on incoming HTTP request bodies. Any in-cluster pod that can reach the webhook endpoint may send an arbitr…

    volcano-sh volcano volcano.sh/volcano Go