Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Cost Management Metrics Operator — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Cost Management Metrics Operator, with AI-generated Chinese analysis, references, and POCs.

Vendor: Red Hat

CVE ID Title CVSS Severity Published
CVE-2026-18382 Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url CWE-918 6.8 Medium 2026-07-30
CVE-2026-18378 Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy) CWE-918 7.6 High 2026-07-30
CVE-2026-18381 Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address CWE-918 7.6 High 2026-07-30

All 3 known CVE vulnerabilities affecting Cost Management Metrics Operator with full Chinese analysis, references, and POCs where available.