tocsin

CVE-2025-68476

3 advisories.

Go/github.com/kedacore/keda/v2 CVE-2025-68476: high, EPSS 0.55%

KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

Action: Upgrade github.com/kedacore/keda/v2 to 2.17.3 or later.

go get github.com/kedacore/keda/v2@v2.18.3
go get github.com/kedacore/keda/v2@v2.17.3

Affected

introducedfixedlast affected
2.18.02.18.3-
02.17.3-

Fixed versions

2.18.32.17.3

Sources

CVE-2025-68476 · published · modified · JSON

Go/github.com/kedacore/keda CVE-2025-68476: unknown, EPSS 0.55%

KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0--

Fixed versions

No fixed version in the source.

Sources

CVE-2025-68476 · published · modified · JSON

Go/github.com/kedacore/keda/v2 CVE-2025-68476: unknown, EPSS 0.55%

KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda

Action: Upgrade github.com/kedacore/keda/v2 to 2.17.3 or later.

go get github.com/kedacore/keda/v2@v2.17.3
go get github.com/kedacore/keda/v2@v2.18.3

Affected

introducedfixedlast affected
02.17.3-
2.18.02.18.3-

Fixed versions

2.17.32.18.3

Sources

CVE-2025-68476 · published · modified · JSON