Cost Management Metrics Operator vulnerabilities

2 known vulnerabilities in Cost Management Metrics Operator from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Cost Management 4: Server-Side Request Forgery

  CVE-2026-18381Jul 30, 2026Red Hat

  A flaw was found in the koku-metrics-operator for Red Hat OpenShift. The operator's CostManagementMetricsConfig custom resource allows a user able to edit the CR to specify an arbitrary upload URL. The operator attaches its own Kubernetes service-account beare

• 7.5 High severity

  p11-kit: Access of Uninitialized Pointer

  CVE-2026-2100Mar 26, 2026P11-glueEPSS 1.34%

  A flaw was found in p11-kit. A remote attacker could exploit this vulnerability by calling the C_DeriveKey function on a remote token with specific IBM kyber or IBM btc derive mechanism parameters set to NULL. This could lead to the RPC-client attempting to re