MEDIUM5.9Go
GHSA-6w3m-4hhp-775q· CVE-2026-53572, GO-2026-5940KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping
Modified: 9/10/2026
package
Go/github.com/kedacore/keda/v2
pkg:go/github.com/kedacore/keda/v2
HIGHGo
GHSA-c4p6-qg4m-9jmr· CVE-2025-68476, GO-2025-4257KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential
Modified: 9/10/2026
—Go
GO-2025-4257· CVE-2025-68476, GHSA-c4p6-qg4m-9jmrKEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
Modified: 2/4/2026
—Go
GO-2026-5940· CVE-2026-53572, GHSA-6w3m-4hhp-775qKEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
Modified: 7/21/2026