KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2025-4257" }
"https://vuln.go.dev/ID/GO-2025-4257.json"