Description
Insecure permissions in volcano v1.8.2 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/volcano-sh/volcano | < 1.10.0-alpha.0 | 1.10.0-alpha.0 | GHSA-5g3x-8g2v-r8x8 |
| Go | volcano.sh/volcano | < 1.10.0-alpha.0 | 1.10.0-alpha.0 | GHSA-5g3x-8g2v-r8x8 |