IN
Product
infracost
by infracost · last CVE Aug 21, 2026
2
CVEs
0
On KEV
5.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch

Add infracost to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71493
5.9
1%
Aug 21
Infracost: Arbitrary file read via config-template readFile symlink traversal
Affected: < 0.10.45
CVE-2026-71494
5.9
0%
Aug 21
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname
Affected: < 0.10.45
Showing 2