Vulnerability GO-2025-4257
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 months ago
December 30, 2025 at 01:49 AM UTC
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
v1.0.0 - v1.5.0
v1.0.0 - v1.5.0
Summary
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
Details
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
6 hours ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Critical
6 hours ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Unknown
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
v2.0.0-beta - v2.19.0 GO-2026-5940
v2.0.0-beta - v2.19.0 GO-2026-5940
Unknown
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
v2.0.0-beta - v2.19.0 GO-2026-5940
v2.0.0-beta - v2.19.0 GO-2026-5940
Medium Risk
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
Impacted packages
Timeline
Published
9 months ago
December 30, 2025 at 01:49 AM UTC
Fixed (v2.17.3)
9 months ago
December 22, 2025 at 11:40 AM UTC
Fixed (v2.18.3)
9 months ago
December 22, 2025 at 11:42 AM UTC
Last Modified
8 months ago
February 04, 2026 at 02:24 AM UTC