VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

volcano.sh/volcano: vulnerability history, versions and safety

volcano.sh/volcano is a package in the Go ecosystem. Vulert records 5 vulnerabilities for it across 120 releases, from Aug 2024 to Jun 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
5 vulnerabilities recorded H1 M1 U3
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
2 in the last 12 months

Most recent disclosure 25 Jun 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all volcano.sh/volcano vulnerabilities

Vulert verdict on volcano.sh/volcano v1.16.0 i

Updated on 23 Oct 2026

Action needed: v1.16.0 has 5 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 85/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Key ecosystem project
  • Community Active

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v1.16.0 — affected i
  • Vulnerabilities on record 5 over 1 year · 2 in the last year i
  • Latest disclosure 25 Jun 2026 i
  • Highest CVSS 7.2 i
  • With no published fix 0 i
  • Stars 6,021 i
  • OpenSSF scorecard 7/10 i
  • Last release this month i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for volcano.sh/volcano, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v1.16.0-rc.0.0.20261021073624-ab52d0d95ff5 21 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-rc.0.0.20261020065217-90125f9f6439 20 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-rc.0.0.20261015121014-527d8fee2d45 15 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0 14 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20261012093713-3529a118f92d 12 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-rc.0 12 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20261012062848-a3892ee17a45 12 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20261010032608-fde2e4843267 10 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20261007085842-43558fe07870 07 Oct 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.5 30 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.6 30 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20260930081059-d2dd7024f4af 30 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.3 30 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260930012036-e0905bab6fe4 30 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260922140131-d1fe35ed58fc 22 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260922090029-bed6d110658e 22 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260918025625-8708aca48a4c 18 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260914040221-a75bbfe07d06 14 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2.0.20260910120241-d8984501e4ad 10 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.2 10 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260904090034-606c628d364d 04 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260904085701-f4bb24e75351 04 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260904085213-dfab61ecd60d 04 Sep 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.4 29 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.2 29 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.5 29 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260828075428-7e9fea119eba 28 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260827111829-b9b0faa0cd7b 27 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260825035026-7b1f5c384149 25 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260820020721-ed72c7c815a9 20 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260819062819-54ae963f2c2e 19 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260817022818-5a15213d8ebb 17 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260813073015-097278acc16c 13 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260811021041-6575302cc650 11 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20260810021040-4ce2f3f34f8e 10 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20260807082538-5727cc6241a8 07 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260807082538-5727cc6241a8 07 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1.0.20260805092036-caf21f3d447c 05 Aug 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.1 30 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.1 30 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.4 30 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260729100229-d57d10f47129 29 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.16.0-alpha.0 29 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260729091629-4011375397a7 29 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260728121727-d40caf9d3cb6 28 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260724075623-8a2c34cf2645 24 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260720153721-26f0052d47de 20 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260717071419-0b6d4106b317 17 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260709093110-dbffb73ea8ff 09 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260708162110-2f30100bd121 08 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260703024705-86d2ff6488cb 03 Jul 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.3 27 Jun 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260625075600-f865e399e58a 25 Jun 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260619062753-d209119ad324 19 Jun 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260611060848-ba800beb90f6 11 Jun 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0 01 Jun 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260530090235-d8dcf154bcb3 30 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260530013734-642cb14a23c8 30 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20260528025933-e6136df50762 28 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260512112119-4687fce2dc41 12 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260509023017-5eb9795727fb 09 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.3 09 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.12.4 09 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.2 08 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0.0.20260508031003-13dde815afb8 08 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.15.0-alpha.0 08 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20260504102713-7faac74fdf21 04 May 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260422065702-cba7b7bfc70b 22 Apr 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260410014549-35606adff43d 10 Apr 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.2 30 Mar 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260330031940-e960b5b7fa45 30 Mar 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260319014530-39f8dd71051d 19 Mar 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.2-0.20260309070818-6008afcb4ade 09 Mar 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260302020113-8e22b02df01e 02 Mar 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260224064710-8bc38528aa0c 24 Feb 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.1 12 Feb 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260212084957-100006793866 12 Feb 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0 31 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260130020846-67b91e417e76 30 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260127023343-e07e2d35fb05 27 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260120113937-ad778835986d 20 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.12.3 18 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1.0.20260116101135-175b2007656c 16 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.1 13 Jan 2026 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.2-0.20251231063545-b557d9b237d4 31 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251229023917-47e6a1ba002b 29 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251223090527-06457b06bbf4 23 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v0.0.0-20251223023726-0c6f3bf706ad 23 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.1 23 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251210091715-050fb4eaa0ee 10 Dec 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251128062106-8482edf4d96e 28 Nov 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251118012757-557edced6a0a 18 Nov 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251114012341-26b56fd76130 14 Nov 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251112022836-49d5a429da23 12 Nov 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251107013711-83f550edb469 07 Nov 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0.0.20251031065807-74976dee5ac0 31 Oct 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.14.0-alpha.0 30 Oct 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.12.0-alpha.2.0.20251028045205-8c2fc38b59fb 28 Oct 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.12.0-alpha.2.0.20251025075700-f819d0eb95db 25 Oct 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.13.0 29 Sep 2025 H1 M1 U3 Apache-2.0 Yes Details →
v1.12.0-alpha.2.0.20250929025439-9b7472d1fe9d 29 Sep 2025 H1 M1 U3 — Yes Details →
v1.11.3-0.20250919022732-9e4045fc7f38 19 Sep 2025 H1 M1 U3 — Yes Details →
v1.10.3-0.20250919022731-3ca06606706b 19 Sep 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2.0.20250821093807-bc0df8e6e41f 21 Aug 2025 H1 M1 U3 — Yes Details →
v1.9.2-0.20250819121705-937d55906c31 19 Aug 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2.0.20250813021758-80eea1df4b92 13 Aug 2025 H1 M1 U3 — Yes Details →
v1.12.2 13 Aug 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2.0.20250702091423-5ade01dc823a 02 Jul 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2.0.20250623120713-068b7bc3d8ec 23 Jun 2025 H1 M1 U3 — Yes Details →
v1.12.1 31 May 2025 H1 M1 U3 — Yes Details →
v1.12.0 31 May 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2.0.20250530151652-adab22d06a2e 30 May 2025 H1 M1 U3 — Yes Details →
v1.11.0-network-topology-preview.3 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.10.2 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.9.1 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.10.2-0.20250430094202-45a4347471a5 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.11.0-network-topology-preview.2.0.20250430094152-7c0ea53fa3cf 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.9.1-0.20250430094046-d687f75a11fa 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.11.2 30 Apr 2025 H1 M1 U3 — Yes Details →
v1.12.0-alpha.2 30 Apr 2025 H1 M1 U3 — Yes Details →

The newest 120 of 695 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 1
  • 2025 2
  • 2026 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 2 of the 5 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for volcano.sh/volcano

The 5 most severe of 5 vulnerabilities recorded for this package

Search all 5 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2025-32777: Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin 7.2 high 1.9.1 30 Apr 2025
CVE-2026-44247: Volcano's Webhook Server Vulnerable to OOM Due to Unbounded HTTP Request Body Size 6.8 medium 1.12.4 08 May 2026
CVE-2024-36533: Insecure Permissions in volcano.sh/volcano N/A unrated 1.10.0-alpha.0 06 Aug 2024
CVE-2025-32777: Volcano Scheduler Denial of Service via Unbounded Response from Elastic Service/extender Plugin N/A unrated 1.9.1 06 May 2025
CVE-2026-44247: Volcano's Webhook Server Vulnerable to OOM Due to Unbounded HTTP Request Body Size N/A unrated 1.12.4 25 Jun 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About volcano.sh/volcano

Is volcano.sh/volcano safe to use?

Vulert records 5 vulnerabilities for volcano.sh/volcano in Go: 0 critical, 1 high, 1 medium and 0 low, plus 3 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is volcano.sh/volcano's Vulert package health score?

Vulert scores volcano.sh/volcano 85/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of volcano.sh/volcano affected?

Yes. v1.16.0, the version you would install today, has 5 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

How many vulnerabilities does volcano.sh/volcano have?

5 vulnerabilities are recorded for volcano.sh/volcano in the Go ecosystem: 0 critical, 1 high, 1 medium and 0 low, plus 3 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new volcano.sh/volcano vulnerabilities disclosed?

2 vulnerabilities were recorded for volcano.sh/volcano in the last 12 months, and the oldest entry in this database dates to 06 Aug 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of volcano.sh/volcano are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor volcano.sh/volcano for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the volcano.sh/volcano version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.