Skip to content
OpenAdvisories

Package · Go

github.com/kedacore/keda

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2026-77524

    KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

    KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled endpoint and select K…

    kedacore keda k8sgpt kserve-agent Azure Linux Wolfi Go