A security vulnerability (CVE-2026-40179) affects the keda package, which integrates with Prometheus, an open-source monitoring system and time series database. The vulnerability impacts versions prior to 2.19.0-r4 and 2.19.0-r5. It has a medium severity with a CVSS score of 6.1. A patch is available in versions 2.19.0-r4 and 2.19.0-r5.