| id: GO-2026-5703 |
| modules: |
| - module: github.com/openmeterio/openmeter |
| versions: |
| - fixed: 1.0.0-beta.228 |
| vulnerable_at: 1.0.0-beta.227 |
| summary: 'OpenMeter: SQL injection through meter creation in github.com/openmeterio/openmeter' |
| cves: |
| - CVE-2026-8462 |
| ghsas: |
| - GHSA-wc3v-3457-c8cm |
| references: |
| - advisory: https://github.com/openmeterio/openmeter/security/advisories/GHSA-wc3v-3457-c8cm |
| - fix: https://github.com/openmeterio/openmeter/commit/6ce29e743165890c10346f4c71d5bf79f1ecaf6f |
| - fix: https://github.com/openmeterio/openmeter/pull/4383 |
| - web: https://github.com/openmeterio/openmeter/releases/tag/v1.0.0-beta.228 |
| source: |
| id: GHSA-wc3v-3457-c8cm |
| created: 2026-06-25T15:40:14.866012826-04:00 |
| review_status: UNREVIEWED |
