Skip to content
OpenAdvisories

Package · Go

github.com/kedacore/keda

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-68476

    KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

    KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCor…

    kedacore keda github.com/kedacore/keda/v2 github.com/kedacore/keda Go