KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-53572 · Microsoft / collected KEV context

EUVD-2026-64131

GHSA-6w3m-4hhp-775q

GO-2026-5940

cve-program · CVE-2026-53572

• https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q
• https://github.com/kedacore/keda/issues/7784
• https://github.com/kedacore/keda/pull/7787
• https://github.com/kedacore/keda/commit/703de9dec86cb25b6ecfa4948880a90487344d3f
• https://github.com/kedacore/keda/releases/tag/v2.20.0

euvd · EUVD-2026-64131

• https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q
• https://github.com/kedacore/keda/issues/7784
• https://github.com/kedacore/keda/pull/7787
• https://github.com/kedacore/keda/commit/703de9dec86cb25b6ecfa4948880a90487344d3f
• https://github.com/kedacore/keda/releases/tag/v2.20.0

nvd · CVE-2026-53572

• https://github.com/kedacore/keda/commit/703de9dec86cb25b6ecfa4948880a90487344d3f
• https://github.com/kedacore/keda/issues/7784
• https://github.com/kedacore/keda/pull/7787
• https://github.com/kedacore/keda/releases/tag/v2.20.0
• https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q

osv · GHSA-6w3m-4hhp-775q

• https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q
• https://github.com/kedacore/keda

osv · GO-2026-5940

• https://github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775q

No related operational record is retained in the current change model.