Login Request a demo
CM
Product
Cost Management Metrics Operator
by Redhat · last CVE Jul 30, 2026
4
CVEs
0
On KEV
7.6
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 2Medium 2Low 0
Severity
All severities4Critical0High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cost Management Metrics Operator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-18381
7.6
0%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address
Affected: All versions, or not specified
CVE-2026-2100
7.5
1%
Mar 26
P11-kit: null dereference via c_derivekey with specific null parameters
Affected: 4.0.0 before 4.4.1
CVE-2026-18382
6.8
1%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url
Affected: All versions, or not specified
CVE-2026-18378
6.8
0%
Jul 30
Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)
Affected: All versions, or not specified
Showing 4