Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address

{
                    "vendor": "Red Hat",
                    "product": "Cost Management 4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "costmanagement/costmanagement-metrics-rhel9-operator",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1790844333",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:cost_management:4::el9"
                    ]
                }