Skip to content
OpenAdvisories

Package · Go

github.com/kedacore/keda

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2026-53572

    KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping

    KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constructs libpq-style connection strings from tenant-controlled host, port, userName, dbName, sslmode, and password values, while escapePostgreCo…

    kedacore keda github.com/kedacore/keda/v2 github.com/kedacore/keda Go