Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

May 2026Clear ×Project: VolcanoClear ×

Volcanov1.12.4Orchestration & ManagementMay 9, 2026

CHECK 1OTHER 2View full analysis

A maintenance release with a security fix for a disclosed denial-of-service vulnerability in the webhook server, plus ordinary scheduling bug fixes. The vulnerability affects webhook servers that accept unbounded HTTP request bodies.

Check if affected (1)

securitymediumCVE-2026-44247 in the Volcano webhook server
Applies if the Volcano webhook server runs.
This release fixes a denial-of-service vulnerability in the Volcano webhook server caused by unbounded HTTP request body size. A pod with network access to the webhook endpoint could send an arbitrarily large request body and cause the server to be killed by OOM.

Source ↗

Volcanov1.13.3Orchestration & ManagementMay 9, 2026

CHECK 1OTHER 4View full analysis

Volcano v1.13.3 includes a security fix for a denial-of-service vulnerability in the webhook server. It also contains other defect corrections.

Check if affected (1)

securitymediumCVE-2026-44247 in the Volcano webhook server
Applies if a pod can access the Volcano webhook endpoint over the network.
CVE-2026-44247 fixes an unbounded HTTP request body size issue in the Volcano webhook server. A pod with network access to the webhook endpoint could send an arbitrarily large request body and cause the server to be killed by OOM.

Source ↗

Volcanov1.14.2Orchestration & ManagementMay 9, 2026

CHECK 1OTHER 17View full analysis

A maintenance release fixes a disclosed webhook denial-of-service vulnerability and corrects scheduler, queue, and event-handling defects. It also updates the Kubernetes version used by the webhook-manager image.

Check if affected (1)

securitymediumCVE-2026-44247: Webhook server request body handling
Applies if the Volcano webhook server runs.
The Volcano webhook server fixes a vulnerability in HTTP request body handling that could let a pod with network access to the webhook endpoint send an arbitrarily large request body and cause an out-of-memory denial of service. The fix ships in the Volcano webhook server.

Source ↗

Browse by month