kedacore/keda Security Advisories | GitStock

critical2026-10-15

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

GHSA-637c-6jxx-4rwm · CVE-2026-77524

medium2026-07-07

KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping

GHSA-6w3m-4hhp-775q · CVE-2026-53572

high2025-12-22

KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

GHSA-c4p6-qg4m-9jmr · CVE-2025-68476