A high-severity security vulnerability (CVE-2026-42154) affects the keda package, which includes Prometheus, an open-source monitoring system and time series database. The vulnerability impacts versions prior to 2.18.3-r0 and can cause a denial of service (availability impact). A fix is available in version 2.18.3-r0.