v3.1.8
Important Notice
Kubecost 3.1.8 includes a significant patch for the agent that will need to be upgraded on all clusters.
This patch should improve cost accuracy in large clusters and in clusters under significant load.
What's Changed
- Fix: Enterprise Custom Pricing bug that would cause incorrect/$0 costs by @nik-kc
- Fix: service monitor indentations in 3.1 by @jessegoodier in #4658
- Fix agent: Improve metric quality that could cause negative usage/costs by @mbolt35 in opencost/opencost#3787
- Fix agent: increase default scrape interval to 60s (up from 30s) to improve cost accuracy caused by incomplete metrics when using intervals that are too short by @jessegoodier in #4660
- Fix: reduce CVE with dependency bumps. Details below. Shout out to @thomasvn!
Helm Chart Comparison Report
Before Chart: kubecost/kubecost@3.1.7
After Chart: kubecost/kubecost@3.1.8
CVE by Severity
| Severity | Count | Prev Count | Difference |
|---|---|---|---|
| critical | 0 | 3 | -3 |
| high | 61 | 99 | -38 |
| medium | 298 | 321 | -23 |
| low | 251 | 253 | -2 |
Unchanged CVEs
High
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2025-59375 | high | modeling |
| CVE-2026-23949 | high | modeling |
| CVE-2026-24049 | high | modeling |
| CVE-2026-27135 | high | network-costs, modeling |
| CVE-2026-29181 | high | cluster-controller |
| CVE-2026-32280 | high | cluster-controller |
| CVE-2026-32281 | high | cluster-controller |
| CVE-2026-32283 | high | cluster-controller |
| CVE-2026-33810 | high | cluster-controller |
| CVE-2026-33811 | high | cluster-controller |
| CVE-2026-33814 | high | cluster-controller |
| CVE-2026-33845 | high | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-33846 | high | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-34986 | high | cluster-controller |
| CVE-2026-39820 | high | cluster-controller |
| CVE-2026-39836 | high | cluster-controller |
| CVE-2026-39883 | high | cluster-controller |
| CVE-2026-40356 | high | network-costs, agent, cost-model, modeling, frontend |
| CVE-2026-4111 | high | network-costs |
| CVE-2026-42009 | high | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-42010 | high | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-42499 | high | cluster-controller |
| CVE-2026-4424 | high | modeling, network-costs |
| CVE-2026-44431 | high | modeling |
| CVE-2026-44432 | high | modeling |
| CVE-2026-45186 | high | frontend, network-costs, cost-model, modeling |
| CVE-2026-4519 | high | modeling |
| CVE-2026-46680 | high | cluster-controller |
| CVE-2026-4786 | high | modeling |
| CVE-2026-4878 | high | cost-model, cluster-controller, modeling, frontend, network-costs, agent |
| CVE-2026-6100 | high | modeling |
Medium
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2023-30571 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2023-45803 | medium | cost-model |
| CVE-2024-29040 | medium | cost-model |
| CVE-2025-11468 | medium | cost-model, modeling |
| CVE-2025-12781 | medium | cost-model, modeling |
| CVE-2025-13034 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2025-13837 | medium | cost-model, modeling |
| CVE-2025-14017 | medium | frontend, curl, network-costs, agent, cost-model, modeling |
| CVE-2025-14087 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2025-14512 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-15282 | medium | cost-model, modeling |
| CVE-2025-23419 | medium | frontend |
| CVE-2025-4516 | medium | cost-model, modeling |
| CVE-2025-50181 | medium | cost-model, modeling |
| CVE-2025-50182 | medium | cost-model, modeling |
| CVE-2025-5278 | medium | frontend, network-costs, agent, cost-model, cluster-controller, modeling |
| CVE-2025-6069 | medium | modeling |
| CVE-2025-60753 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2025-68972 | medium | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-0672 | medium | cost-model, modeling |
| CVE-2026-0865 | medium | modeling |
| CVE-2026-0990 | medium | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-1484 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-1489 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-1502 | medium | cost-model, modeling |
| CVE-2026-1757 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-1965 | medium | network-costs, agent, cost-model, modeling, frontend, curl |
| CVE-2026-2100 | medium | agent, modeling, network-costs |
| CVE-2026-22185 | medium | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-25645 | medium | cost-model, modeling |
| CVE-2026-2673 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-27456 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-28386 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-28390 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-28684 | medium | modeling |
| CVE-2026-29111 | medium | network-costs, agent, modeling |
| CVE-2026-31790 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-32282 | medium | cluster-controller |
| CVE-2026-32284 | medium | cost-model, modeling |
| CVE-2026-32288 | medium | cluster-controller |
| CVE-2026-32289 | medium | cluster-controller |
| CVE-2026-32776 | medium | modeling, frontend, network-costs, cost-model |
| CVE-2026-32777 | medium | frontend, network-costs, cost-model, modeling |
| CVE-2026-32778 | medium | frontend, network-costs, cost-model, modeling |
| CVE-2026-34743 | medium | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-35206 | medium | cluster-controller |
| CVE-2026-3644 | medium | cost-model, modeling |
| CVE-2026-3783 | medium | curl, network-costs, agent, cost-model, modeling, frontend |
| CVE-2026-3784 | medium | frontend, curl, network-costs, agent, cost-model, modeling |
| CVE-2026-3805 | medium | frontend, curl, network-costs, agent, cost-model, modeling |
| CVE-2026-3833 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-39823 | medium | cluster-controller |
| CVE-2026-39825 | medium | cluster-controller |
| CVE-2026-39826 | medium | cluster-controller |
| CVE-2026-40355 | medium | modeling, frontend, network-costs, agent, cost-model |
| CVE-2026-4046 | medium | network-costs, agent, cost-model, cluster-controller, modeling, frontend |
| CVE-2026-4105 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-41989 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-42011 | medium | modeling, frontend, network-costs, agent, cost-model |
| CVE-2026-4224 | medium | modeling, cost-model |
| CVE-2026-42308 | medium | cost-model, modeling |
| CVE-2026-4426 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-4437 | medium | agent, cost-model, cluster-controller, modeling, frontend, network-costs |
| CVE-2026-45409 | medium | modeling |
| CVE-2026-4873 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-5121 | medium | network-costs, modeling |
| CVE-2026-5435 | medium | cost-model, cluster-controller, modeling, frontend, network-costs, agent |
| CVE-2026-5450 | medium | modeling, frontend, network-costs, agent, cost-model, cluster-controller |
| CVE-2026-5545 | medium | modeling, frontend, network-costs, agent, cost-model |
| CVE-2026-5713 | medium | modeling, cost-model |
| CVE-2026-5745 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-5773 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-5928 | medium | agent, cost-model, cluster-controller, modeling, frontend, network-costs |
| CVE-2026-6019 | medium | cost-model, modeling |
| CVE-2026-6253 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-6429 | medium | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-6732 | medium | network-costs, agent, cost-model, modeling, frontend |
| CVE-2026-7168 | medium | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-9149 | medium | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-9150 | medium | frontend, network-costs, agent, cost-model, modeling |
| GHSA-xmrv-pmrh-hhx2 | medium | cost-model |
Low
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2021-3572 | low | cost-model |
| CVE-2022-27943 | low | network-costs, agent, cost-model, cluster-controller, modeling, frontend |
| CVE-2022-3219 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2022-41409 | low | network-costs, agent, cost-model, cluster-controller, modeling, frontend |
| CVE-2023-32636 | low | network-costs, agent, cost-model, modeling, frontend |
| CVE-2023-4156 | low | modeling, frontend, network-costs, agent, cost-model |
| CVE-2023-45322 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2023-50495 | low | network-costs, agent, cost-model, cluster-controller, modeling, frontend |
| CVE-2023-5752 | low | cost-model |
| CVE-2024-0232 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2024-11053 | low | network-costs, agent, cost-model, modeling, frontend |
| CVE-2024-13176 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2024-25260 | low | cost-model |
| CVE-2024-34459 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2024-41996 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2024-7264 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2024-9681 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-13151 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-1371 | low | cost-model |
| CVE-2025-1376 | low | cost-model |
| CVE-2025-1377 | low | cost-model |
| CVE-2025-14524 | low | agent, cost-model, modeling, frontend, curl, network-costs |
| CVE-2025-14819 | low | curl |
| CVE-2025-15079 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-15224 | low | network-costs, agent, cost-model, modeling, frontend |
| CVE-2025-1632 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2025-1795 | low | cost-model |
| CVE-2025-27113 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2025-30258 | low | cost-model, modeling, frontend, network-costs, agent |
| CVE-2025-3360 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2025-53859 | low | frontend |
| CVE-2025-5915 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-5916 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-5917 | low | network-costs, agent, cost-model, modeling, frontend |
| CVE-2025-5918 | low | network-costs, agent, cost-model, modeling, frontend |
| CVE-2025-6075 | low | modeling |
| CVE-2025-6170 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-66382 | low | frontend, network-costs, cost-model, modeling |
| CVE-2025-7039 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-70873 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2025-9232 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-0988 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-0989 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-0992 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-1485 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-2297 | low | cost-model, modeling |
| CVE-2026-24515 | low | cost-model, modeling, frontend, network-costs |
| CVE-2026-24883 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-27171 | low | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-28387 | low | cost-model, modeling, frontend, network-costs, agent |
| CVE-2026-28388 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-28389 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-31789 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-3479 | low | cost-model, modeling |
| CVE-2026-3832 | low | frontend, network-costs, agent, cost-model, modeling |
| CVE-2026-41080 | low | frontend, network-costs, cost-model, modeling |
| CVE-2026-41990 | low | agent, cost-model, modeling, frontend, network-costs |
| CVE-2026-4438 | low | network-costs, agent, cost-model, cluster-controller, modeling, frontend |
| CVE-2026-6276 | low | frontend, network-costs, agent, cost-model, modeling |
Added CVEs
No new vulnerabilities found.
Removed CVEs
Critical
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2025-68121 | critical | cost-model |
| CVE-2026-33186 | critical | agent, cost-model |
High
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2025-61726 | high | cost-model |
| CVE-2026-24051 | high | agent |
| CVE-2026-25679 | high | cost-model |
| CVE-2026-27135 | high | agent |
| CVE-2026-27896 | high | cost-model |
| CVE-2026-29181 | high | agent |
| CVE-2026-32280 | high | agent, cost-model |
| CVE-2026-32281 | high | agent, cost-model |
| CVE-2026-32283 | high | agent, cost-model |
| CVE-2026-33252 | high | cost-model |
| CVE-2026-33487 | high | cost-model |
| CVE-2026-33810 | high | agent |
| CVE-2026-33811 | high | agent, cost-model |
| CVE-2026-33814 | high | agent, cost-model |
| CVE-2026-34742 | high | cost-model |
| CVE-2026-34986 | high | cost-model, agent |
| CVE-2026-39820 | high | agent, cost-model |
| CVE-2026-39836 | high | agent, cost-model |
| CVE-2026-39883 | high | agent, cost-model |
| CVE-2026-4111 | high | agent |
| CVE-2026-42499 | high | agent, cost-model |
| CVE-2026-4424 | high | agent |
| CVE-2026-4519 | high | cost-model |
| CVE-2026-4786 | high | cost-model |
| CVE-2026-6100 | high | cost-model |
| GHSA-hwqm-qvj9-4jr2 | high | cost-model |
| GHSA-pcgw-qcv5-h8ch | high | cost-model |
| GHSA-q382-vc8q-7jhj | high | cost-model |
Medium
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2025-14831 | medium | agent |
| CVE-2025-61728 | medium | cost-model |
| CVE-2025-61730 | medium | cost-model |
| CVE-2026-0865 | medium | cost-model |
| CVE-2026-2100 | medium | frontend, cost-model |
| CVE-2026-27142 | medium | cost-model |
| CVE-2026-29111 | medium | frontend, cost-model |
| CVE-2026-32282 | medium | agent, cost-model |
| CVE-2026-32288 | medium | agent, cost-model |
| CVE-2026-32289 | medium | agent, cost-model |
| CVE-2026-39823 | medium | agent, cost-model |
| CVE-2026-39825 | medium | agent, cost-model |
| CVE-2026-39826 | medium | cost-model, agent |
| CVE-2026-5121 | medium | agent |
| GHSA-xmrv-pmrh-hhx2 | medium | agent |
Low
| CVE ID | Severity | Affected Images |
|---|---|---|
| CVE-2025-9820 | low | agent |
| CVE-2026-27139 | low | cost-model |
Full Changelog: v3.1.7...v3.1.8
Contributors
mbolt35, thomasvn, and 2 other contributors