A high-severity security vulnerability (CVE-2026-42154) affects the keda package, which relates to Prometheus, an open-source monitoring system and time series database. The vulnerability impacts versions prior to 2.19.0-r4 and 2.19.0-r5. It does not affect confidentiality or integrity but causes a significant availability impact. A patch is available in versions 2.19.0-r4 and 2.19.0-r5.