KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential in github.com/kedacore/keda
{ "url": "https://pkg.go.dev/vuln/GO-2025-4257", "review_status": "UNREVIEWED" }