github.com/kedacore/keda/v2
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Go
- Vulnerability status
- 6 advisory(ies) without a verdict
Advisories (6)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-637c-6jxx-4rwm KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication | < 2.21.0 | Undetermined |
| GHSA-6w3m-4hhp-775q KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping | < 2.20.0 | Undetermined |
| GHSA-c4p6-qg4m-9jmr KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential | 2.18.0 – < 2.18.3 ; < 2.17.3 | Undetermined |
| GO-2025-4257 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda | < 2.17.3 ; 2.18.0 – < 2.18.3 | Undetermined |
| GO-2026-5940 KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda | < 2.20.0 | Undetermined |
| GO-2026-6776 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda | < 2.21.0 | Undetermined |
Sources
| Source | Licence |
|---|