High
CVE-2025-68476
KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA re…
Tag: KEDA
All CVEs associated with "KEDA". Page 1/1 • 1 CVEs.
About “KEDA”
A curated feed of “KEDA”-related CVEs appears below. We currently track 1 CVEs for this tag (all time). In the last 365 days, 1 were published. Average CVSS is 8.2 (all time; 8.2 over 365d), and 100% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal').
In our taxonomy this topic maps to a MODERATE impact class. Container and Kubernetes fixes usually require image rebuilds and control plane or node upgrades. Prioritize exposed surfaces, restart workloads on patched bases, and tighten RBAC and NetworkPolicies. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
Support & lifecycle: keda
This table shows recent release cycles and their projected end-of-life. Data source: endoflife.date.
| Cycle | Release | Latest | EOL | LTS |
|---|---|---|---|---|
| 2.19 | 2.19.0 | - | ||
| 2.18 | 2.18.3 | - | ||
| 2.17 | 2.17.3 | Expired | ||
| 2.16 | 2.16.1 | Expired | ||
| 2.15 | 2.15.1 | Expired | ||
| 2.14 | 2.14.1 | Expired | ||
| 2.13 | 2.13.1 | Expired | ||
| 2.12 | 2.12.1 | Expired | ||
| 2.11 | 2.11.2 | Expired | ||
| 2.10 | 2.10.1 | Expired | ||
| 2.9 | 2.9.3 | Expired | ||
| 2.8 | 2.8.2 | Expired | ||
| 2.7 | 2.7.1 | Expired | ||
| 2.6 | 2.6.1 | Expired | ||
| 2.5 | 2.5.0 | Expired | ||
| 2.4 | 2.4.0 | Expired | ||
| 2.3 | 2.3.0 | Expired | ||
| 2.2 | 2.2.0 | Expired | ||
| 2.1 | 2.1.0 | Expired | ||
| 2.0 | 2.0.0 | Expired | ||
| 1.5 | 1.5.0 | - Expired |
Maintained Soon (≤ 180 days) Expired
Subscribe lifecycle: RSS · RSS (expired) · ICS
Subscribe CVEs: RSS for “KEDA” · RSS (High+Critical only)
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0