github.com/infracost/infracost vulnerabilities
CVEs whose affected-version data names the github.com/infracost/infracost package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-71494MediumInfracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD
Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, internal/hcl/remote_variables_loader.go and related Terraform Cloud, remote-plan, and Terragrunt registry request paths can attach a…
▾ Sunlitinfracost · github.com/infracost/infracostEPSS 0.37%via NVD
CVE-2026-71493MediumInfracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD
Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD. Prior to 0.10.45, the readFile, pathExists, isDir, and matchPaths template functions in internal/config/template/parser.go use a lexical filepath.Rel …
▾ Sunlitinfracost · github.com/infracost/infracostEPSS 0.43%via NVD