A high-severity security vulnerability (CVE-2026-42151) affects the keda package, which integrates with Prometheus, an open-source monitoring system and time series database. Versions of keda prior to 2.18.3-r0 are vulnerable. The vulnerability has a CVSS score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required. Confidentiality impact is high, but integrity and availability are not affected. A patch is available in version 2.18.3-r0.