Skip to content
OpenAdvisories

Package · Go

github.com/opencost/opencost

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2026-44300

    OpenCost ServiceKey Endpoint Unauthorized Credential Overwrite/Injection

    OpenCost provides cost monitoring for Kubernetes workloads and cloud costs. Prior to 1.121.0, the POST /serviceKey endpoint in pkg/costmodel/router.go allows a network client to invoke AddServiceKey without mandatory authentication and submit an arbitrary key…

    opencost opencost github.com/opencost/opencost Go