1 matches found
CVE-2026-53572: Improper Neutralization of Special Elements in Output Used by a Downstream Component
KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresqlscaler.go constructs libpq-style connection strings from tenant-controlled host, port, userName, dbName, sslmode, and password values, while escapePostgreConnectionParameter only quotes values...
5.9CVSS5.8AI score0.00395EPSS
SaveExploits0References3
20