All products

github.com/infracost/infracost

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Infracost: Terraform Cloud and registry token disclosure via unvalidated hostnameCVE-2026-71494 · GHSA-6X6C-W9W9-HV4HVersion ranges need review. github.com/infracost/infracost Go Medium Fix reported
Infracost: Arbitrary file read via config-template readFile symlink traversalCVE-2026-71493 · GHSA-MMG6-4QMV-6PC8Version ranges need review. github.com/infracost/infracost Go Medium Fix reported