CVE-2026-53572 vulnerabilities

Vulnerabilities for packages: keda-http-add-on, keda-http-add-on-fips...

CVE-2026-42502 affecting package keda for versions less than 2.14.1-14

CVE-2026-42502 affecting package keda for versions less than 2.14.1-14. A patched version of the package is available...

CVE-2026-25681 affecting package keda for versions less than 2.14.1-14

CVE-2026-25681 affecting package keda for versions less than 2.14.1-14. A patched version of the package is available...

CVE-2026-25680 affecting package keda for versions less than 2.14.1-14

CVE-2026-25680 affecting package keda for versions less than 2.14.1-14. A patched version of the package is available...

CVE-2026-53572

creationtimestamp| type| source ---|---|--- 2026-07-08 00:35:03+00:00| published-proof-of-concept| https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the escapePostgreConnectionParameter function. An attacker can inject arbitrary PostgreSQL connection parameters by supplying specially crafted values containing non-space whitespace or backslash characters, which are...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the escapePostgreConnectionParameter function. An attacker can inject arbitrary PostgreSQL connection parameters by supplying specially crafted values containing non-space whitespace or backslash characters, which are...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, docker-machine-driver-harvester, frankenphp-8.4, grafana-fips, rancher, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server,...

Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift updates. The following updates for the Custom Metric Autoscaler operator for Red Hat OpenShift are now available: custom-metrics-autoscaler-adapter-container custom-metrics-autoscaler-admission-webhooks-container...

CVE-2026-42506 affecting package keda for versions less than 2.14.1-13

CVE-2026-42506 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...

CVE-2026-27136 affecting package keda for versions less than 2.14.1-13

CVE-2026-27136 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...

CVE-2026-39821 affecting package keda for versions less than 2.14.1-13

CVE-2026-39821 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...

AZL-87852 CVE-2026-39821 affecting package keda for versions less than 2.14.1-13

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode"xn--example-.com" incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna...

AZL-87864 CVE-2026-42502 affecting package keda for versions less than 2.14.1-14

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87867 CVE-2026-27136 affecting package keda for versions less than 2.14.1-13

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87855 CVE-2026-42506 affecting package keda for versions less than 2.14.1-13

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87861 CVE-2026-25681 affecting package keda for versions less than 2.14.1-14

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering...

AZL-87858 CVE-2026-25680 affecting package keda for versions less than 2.14.1-14

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CVE-2026-35469 affecting package keda for versions less than 2.14.1-12

CVE-2026-35469 affecting package keda for versions less than 2.14.1-12. A patched version of the package is available...

CLEANSTART-2026-QS87161 Security fixes for CVE-2026-24051, CVE-2026-26958, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-33815, CVE-2026-33816, CVE-2026-34986, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39882, CVE-2026-40179, CVE-2026-41889, CVE-2026-42151, CVE-2026-42154, CVE-2026-42499, CVE-2026-42501, CVE-2026-44903, ghsa-8rm2-7qqf-34qm, ghsa-9h8m-3fm2-qjrq, ghsa-9jj7-4m8r-rfcm, ghsa-fw7p-63qq-7hpr, ghsa-fw8g-cg8f-9j28, ghsa-j88v-2chj-qfwx, ghsa-p77j-4mvh-x3m3, ghsa-vffh-x6r8-xx99, ghsa-w8rr-5gcm-pp58, ghsa-wg65-39gg-5wfj, ghsa-xmrv-pmrh-hhx2 applied in versions: 2.19.0-r0, 2.19.0-r1, 2.19.0-r2, 2.19.0-r3

Multiple security vulnerabilities affect the keda package. These issues are resolved in later releases. See references for individual vulnerability details...