infracost
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| infracost | 2 | – | Aug 21, 2026 |
Exploited and recent CVEs
- CVE-2026-71493 Infracost: Arbitrary file read via config-template readFile symlink traversal 0.5%
- CVE-2026-71494 Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname 0.5%