Vulnerability GO-2026-5940
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 months ago
July 17, 2026 at 07:42 PM UTC
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
v1.0.0 - v1.5.0
v1.0.0 - v1.5.0
Summary
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
Details
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
6 hours ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Critical
6 hours ago
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
v2.0.0-beta - v2.20.2 GHSA-637c-6jxx-4rwm
Medium Risk
3 months ago
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
v2.0.0-beta - v2.19.0 GHSA-6w3m-4hhp-775q
Unknown
9 months ago
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
v2.0.0-beta - v2.17.2 and v2.18.0 - v2.18.2 GO-2025-4257
v2.0.0-beta - v2.17.2 and v2.18.0 - v2.18.2 GO-2025-4257
Unknown
9 months ago
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
v2.0.0-beta - v2.17.2 and v2.18.0 - v2.18.2 GO-2025-4257
v2.0.0-beta - v2.17.2 and v2.18.0 - v2.18.2 GO-2025-4257
Impacted packages
Timeline
Published
3 months ago
July 17, 2026 at 07:42 PM UTC
Fixed (v2.20.0)
4 months ago
June 01, 2026 at 02:39 PM UTC
Last Modified
2 months ago
July 21, 2026 at 07:15 PM UTC