AZL-77000 CVE-2025-58190 affecting package keda 2.14.1-9

The html.Parse function in golang.org/x/net/html has an infinite parsing loop when processing certain inputs, which can lead to denial of service DoS if an attacker provides specially crafted HTML content...

CVE-2025-68476 affecting package keda for versions less than 2.14.1-9

CVE-2025-68476 affecting package keda for versions less than 2.14.1-9. A patched version of the package is available...

AZL-72736 CVE-2025-68156 affecting package keda for versions less than 2.14.1-9

Expr is an expression language and expression evaluation for Go. Prior to version 1.17.7, several builtin functions in Expr, including flatten, min, max, mean, and median, perform recursive traversal over user-provided data structures without enforcing a maximum recursion depth. If the evaluation...