Threats tagged 'cleanstart-2026-lk07960'

CVE-2026-78661 is a high-severity vulnerability in the kedacore-http-add-on affecting versions prior to 0.16.0-r0 and 0.18.1-r13. It involves improper handling when coalescing adjacent text nodes in the addText and fosterParent functions, specifically when appending to an existing TextNode's Data via string concatenation. This flaw can lead to a confidentiality impact without affecting integrity or availability. A patch is available in versions 0.16.0-r0 and 0.18.1-r13.