{"action":"Upgrade github.com/kedacore/keda/v2 to 2.21.0 or later.","affected":[{"fixed":"2.21.0","introduced":"0"}],"component":"github.com/kedacore/keda/v2","cve_ids":["CVE-2026-77524"],"ecosystem":"Go","epss":0.00635,"exploited":false,"fixed_versions":["2.21.0"],"ghsa_id":"GHSA-637c-6jxx-4rwm","id":"tcs_01M5KGWA72ZHNFDPY33DXR3G1M","modified_at":"2026-10-19T21:31:49.973645562Z","published_at":"2026-10-19T21:08:35Z","references":["https://osv.dev/vulnerability/GO-2026-6776","https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm","https://nvd.nist.gov/vuln/detail/CVE-2026-77524","https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d","https://github.com/kedacore/keda/releases/tag/v2.21.0"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-6776#Go/github.com/kedacore/keda/v2","url":"https://osv.dev/vulnerability/GO-2026-6776"}],"summary":"KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda"}