github.com/kedacore/keda/v2 vulnerabilities (Go)

3 vulnerabilities.

• github.com/kedacore/keda/v2 Go KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication CVE-2026-77524 Fix available 9.9 CriticalOctober 14, 2026
• github.com/kedacore/keda/v2 Go KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping CVE-2026-53572 Fix available 5.9 MediumJuly 7, 2026
• github.com/kedacore/keda/v2 Go KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential CVE-2025-68476 Fix available 8.2 HighDecember 22, 2025