AZL-57165 CVE-2025-27144 affecting package keda for versions less than 2.14.1-3

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. In versions on the 4.x branch prior to version 4.0.5, when parsing compact JWS or JWE...

Azure Linux 3.0 Security Update: cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter (CVE-2022-3162)

The version of cert-manager / keda / kube-vip-cloud-provider / prometheus-adapter installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-3162 advisory. - Users authorized to list or watch one type of...

CVE-2024-28180 affecting package keda for versions less than 2.4.0-26

CVE-2024-28180 affecting package keda for versions less than 2.4.0-26. A patched version of the package is available...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt (CVE-2022-32149)

The version of application-gateway-kubernetes-ingress / cf-cli / cni / containerized-data-importer / containernetworking-plugins / gh / keda / kubevirt installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the...

Azure Linux 3.0 Security Update: cert-manager / influxdb / keda / libcontainers-common / packer (CVE-2024-6104)

The version of cert-manager / influxdb / keda / libcontainers-common / packer installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-6104 advisory. - go-retryablehttp prior to 0.7.7 did not sanitize urls...

Azure Linux 3.0 Security Update: application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector (CVE-2021-44716)

The version of application-gateway-kubernetes-ingress / cf-cli / cri-o / csi-driver-lvm / golang / keda / moby-engine / node-problem-detector installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-44716...

CVE-2024-45338 affecting package keda for versions less than 2.14.1-2

CVE-2024-45338 affecting package keda for versions less than 2.14.1-2. A patched version of the package is available...

CVE-2024-45338 affecting package keda for versions less than 2.4.0-25

CVE-2024-45338 affecting package keda for versions less than 2.4.0-25. A patched version of the package is available...

AZL-54407 CVE-2024-45338 affecting package keda for versions less than 2.14.1-2

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-54562 CVE-2024-45338 affecting package keda for versions less than 2.4.0-25

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...

AZL-52239 CVE-2024-51744 affecting package keda for versions less than 2.4.0-29

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

AZL-52201 CVE-2024-51744 affecting package keda for versions less than 2.14.1-7

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

CVE-2024-35255 affecting package keda for versions less than 2.14.1-1

CVE-2024-35255 affecting package keda for versions less than 2.14.1-1. An upgraded version of the package is available that resolves this issue...

Moderate: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat 2.14.1-467 OpenShift Update

Custom Metrics Autoscaler Operator for Red Hat OpenShift Security Update to fix Moderate CVE-2024-24791 The Custom Metrics Autoscaler Operator for Red Hat OpenShift is an optional operator based upon the Kubernetes Event Driven Autoscaler KEDA, which allows workloads to be scaled by using...

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24

CVE-2024-24786 affecting package keda for versions less than 2.4.0-24. A patched version of the package is available...

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23

CVE-2022-32149 affecting package keda for versions less than 2.4.0-23. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22

CVE-2024-6104 affecting package keda for versions less than 2.4.0-22. A patched version of the package is available...

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2

CVE-2024-6104 affecting package keda for versions less than 2.14.0-2. A patched version of the package is available...

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1

CVE-2021-42836 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1

CVE-2021-42248 affecting package keda for versions less than 2.14.0-1. An upgraded version of the package is available that resolves this issue...