VendorsRed Hatcost_management_metrics_operatorall versions
Vulnerabilities

Red Hat Cost Management Metrics Operator

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2026-18378
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
Published 2026-07-30 · Modified
7.6EPSS 0.005
CVE-2026-18381
Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
Published 2026-07-30 · Modified
7.6EPSS 0.004
CVE-2026-2100
P11-kit: null dereference via c_derivekey with specific null parameters
Published 2026-03-26 · Analyzed
7.5EPSS 0.013
CVE-2026-18382
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
Published 2026-07-30 · Modified
6.8EPSS 0.005