CLEANSTART-2026-QG29281: Prometheus is an open-source monitoring system and time series database

Q: What level of access would an attacker need to exploit this issue?

The available severity data indicates network-based exploitation with low attack complexity, requiring no privileges and no user interaction.

Q: What is the expected security impact?

The reported impact is high availability impact, with no reported confidentiality or integrity impact.

Q: Which deployed component should be reviewed for exposure?

Review deployments that include the cleanstart/keda package. The provided data does not identify affected versions or configuration prerequisites.

Published Nov 11, 2026

Updated

Security vulnerability affects the keda package. Prometheus is an open-source monitoring system and time series database.

Affected Software

1 affected componentFixes available

cleanstart/keda<2.19.0-r4

2.19.0-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/keda to a version that resolves this vulnerability.
Fixed in 2.19.0-r4
Upgrade
Upgrade cleanstart/keda to a version that resolves this vulnerability.
Fixed in 2.19.0-r5

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-42154

Frequently Asked Questions

What level of access would an attacker need to exploit this issue?

The available severity data indicates network-based exploitation with low attack complexity, requiring no privileges and no user interaction.

What is the expected security impact?

The reported impact is high availability impact, with no reported confidentiality or integrity impact.

Which deployed component should be reviewed for exposure?

Review deployments that include the cleanstart/keda package. The provided data does not identify affected versions or configuration prerequisites.

CLEANSTART-2026-QG29281: Prometheus is an open-source monitoring system and time series database

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access would an attacker need to exploit this issue?

What is the expected security impact?

Which deployed component should be reviewed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What level of access would an attacker need to exploit this issue?

What is the expected security impact?

Which deployed component should be reviewed for exposure?