cost_management_metrics_operator vulnerabilities
CVEs whose affected-version data names the cost_management_metrics_operator package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-18382Medium· 6.8A flaw was found in koku-metrics-operator
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary OAuth token endpoint. When authentication.type is set to service-account, the…
CVE-2026-18381High· 7.6A flaw was found in the koku-metrics-operator for Red Hat OpenShift
A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernete…
CVE-2026-18378High· 7.6A flaw was found in koku-metrics-operator
A flaw was found in koku-metrics-operator. The operator's CostManagementMetricsConfig custom resource allows user able to edit the CR to specify an arbitrary upload URL. When authentication.type is set to token (the default), the cluster…