A high-severity security vulnerability (CVE-2026-84304) affects the yunikorn-k8shim package, specifically versions prior to 1.8.0-r4. The issue involves the gRPC-Go implementation, which is the Go language version of gRPC. A fix is available in version 1.8.0-r4.