Improper input validation in Openmeter

CVE-2026-18801

OpenMeter contains a stored, or second-order, SQL injection vulnerability in the handling of customer usage-attribution values. An attacker who can create or update a customer can store a malicious value in the usageAttribution.key or u…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)