github.com/kedacore/keda
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- Go
- Vulnerability status
- affected by 3 advisory(ies)
Advisories (4)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-637c-6jxx-4rwm KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication | ≤ 1.5.0 | Undetermined |
| GO-2025-4257 KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda | * | Affected |
| GO-2026-5940 KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda | * | Affected |
| GO-2026-6776 KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda | * | Affected |
Sources
| Source | Licence |
|---|