openmeter

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

openmeter records in CISA KEV

No openmeter vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-15398 CVE-2026-18801 · GHSA-r49g-35qj-7264

Stored Clickhouse SQL Injection Through Customer Usage Attribution

MEDIUM 48

OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-08-04 No fix listed CWE-20

TI-2026-07432 CVE-2026-8462 · GHSA-wc3v-3457-c8cm

OpenMeter SQL Injection in ClickHouse-backed Meter Definitions

MEDIUM 47

SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify metering event data, and potentially cause…

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00511 Published 2026-09-16 Fixed in 1.0.0-beta.228 CWE-89

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0