Go/volcano.sh/volcano CVE-2026-44247: unknown, EPSS 0.17%
Volcano's webhook server vulnerable to OOM due to unbounded HTTP request body size in volcano.sh/volcano
Action: Upgrade volcano.sh/volcano to 1.12.4 or later.
go get volcano.sh/volcano@v1.12.4go get volcano.sh/volcano@v1.13.3go get volcano.sh/volcano@v1.14.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.4 | - |
| 1.13.0 | 1.13.3 | - |
| 1.14.0 | 1.14.2 | - |
Fixed versions
| 1.12.4 | 1.13.3 | 1.14.2 |
Sources
- osv: GO-2026-5269
- https://github.com/volcano-sh/volcano/security/advisories/GHSA-8wxp-xxp2-rcgx
- https://nvd.nist.gov/vuln/detail/CVE-2026-44247
CVE-2026-44247 · published · modified · JSON