VendorsRed Hatcost_management_metrics_operatorany version
Vulnerabilities

Red Hat Cost Management Metrics Operator any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-18378
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
Published 2026-07-30 · Analyzed
7.6EPSS 0.004
CVE-2026-18381
Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
Published 2026-07-30 · Analyzed
7.6EPSS 0.003
CVE-2026-18382
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
Published 2026-07-30 · Analyzed
6.8EPSS 0.005