github.com/kedacore/keda
KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
View on Github
Activity
- Latest release
- 6y ago
- Total releases
- 7
- Cadence
- ~35 days
- Last 12 months
- 0
Reach
- Stars
- 10.6k
Details
- First release
- Nov 16, 2019
| Version | Released | |
|---|---|---|
v1.5.0
minor
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.5.0
minor
Dependencies (38)
+ 30 more |
|
v1.4.1
patch
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.1
patch
Dependencies (36)
+ 28 more |
|
v1.4.0
minor
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (36)
+ 28 more |
|
v1.3.0
minor
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.3.0
minor
Dependencies (38)
+ 30 more |
|
v1.2.0
minor
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.2.0
minor
Dependencies (38)
+ 30 more |
|
v1.1.0
minor
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (36)
+ 28 more |
|
v1.0.0
initial
3 CVEs
CVE-2026-77524
GO-2026-6776
GHSA-637c-6jxx-4rwm
Oct 19, 2026
KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-53572
GO-2026-5940
GHSA-6w3m-4hhp-775q
Jul 17, 2026
KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda KEDA has PostgreSQL connection string parameter injection via incomplete whitespace escaping in github.com/kedacore/keda Updated Jul 21, 2026 · Source: OSV.dev
CVE-2025-68476
GO-2025-4257
GHSA-c4p6-qg4m-9jmr
Dec 30, 2025
KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda References Updated Feb 04, 2026 · Source: OSV.dev |
v1.0.0
initial
Dependencies (34)
+ 26 more |