Kedacore vulnerabilities
We track 2 vulnerabilities in Kedacore products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Kedacore vulnerabilities
- 9.9 Critical severity
keda: Improper Privilege Management
KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled endpoint and select Ku
- 8.2 High severity
keda: Improper Limitation of a Pathname to a Restricted Directory
KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp