All 2 CVE vulnerabilities found in infracost, with AI-generated Chinese analysis, references, and POCs.
Vendor: infracost
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71493 | Infracost: Arbitrary file read via config-template readFile symlink traversal CWE-22 | 5.9 | Medium | 2026-08-21 |
| CVE-2026-71494 | Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname CWE-522 | 5.9 | Medium | 2026-08-21 |
All 2 known CVE vulnerabilities affecting infracost with full Chinese analysis, references, and POCs where available.