Login Request a demo
CM
Product
Cost Management Metrics Operator
by Redhat · last CVE Jul 30, 2026
3
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 1Medium 2Low 0
Severity
All severities3Critical0High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cost Management Metrics Operator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18381
7.6
0%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
Affected: All versions, or not specified
CVE-2026-18382
6.8
1%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
Affected: All versions, or not specified
CVE-2026-18378
6.8
0%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
Affected: All versions, or not specified
Showing 3