Infracost vulnerabilities

Products

• Infracost 2

Newest

• infracost Infracost: Arbitrary file read via config-template readFile symlink traversal CVE-2026-71493 Fix available 5.9 MediumAugust 21, 2026
• infracost Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname CVE-2026-71494 Fix available 5.9 MediumAugust 21, 2026