OpenMeter: SQL injection through meter creation in github.com/openmeterio/openmeter
OpenMeter: SQL injection through meter creation in github.com/openmeterio/openmeter
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-8462US | — | — | ||
SQL injection in ClickHouse-backed meter definitions in OpenMeter OpenMeter before v1.0.0-beta.228 on all platforms allows a remote unauthenticated attacker to access or modify met… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/openmeterio/openmeter/commit/6ce29e743165890c10346f4c71d5bf79f1ecaf6fFIX
- https://github.com/openmeterio/openmeter/pull/4383FIX
- https://github.com/openmeterio/openmeter/releases/tag/v1.0.0-beta.228WEB
- https://github.com/openmeterio/openmeter/security/advisories/GHSA-wc3v-3457-c8cmADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan