Aiven-open vulnerabilities

Products

• Klaw 3
• Pghoard 3
• Karapace 2

Newest

• aiven-open pghoard PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write CVE-2026-63120 8.4 HighOctober 23, 2026
• aiven-open pghoard PGHoard: Password written to debug log CVE-2026-54711 2.4 LowJune 18, 2026
• aiven-open klaw Klaw: Improper Access Control Allows Disclosure of Password Hash CVE-2026-45080 6.9 MediumJune 2, 2026
• aiven-open klaw Klaw: user lockout due to case sensitivity inconsistency CVE-2026-44367 2.7 LowJune 2, 2026
• aiven karapace Karapace: Path Traversal in Backup Reader CVE-2026-29190 4.1 MediumMarch 7, 2026
• aiven klaw Klaw has an improper authorisation check on /resetMemoryCache CVE-2026-25999 7.1 HighFebruary 11, 2026
• aiven-open bigquery-connector-for-apache-kafka Arbitrary File Read in Google BigQuery Sink connector CVE-2026-23529 7.7 HighJanuary 16, 2026
• aiven myhoard Myhoard logs backup encryption key in plain text CVE-2025-67745 7.1 HighDecember 18, 2025
• aiven-open karapace Karapace is vulnerable to Authentication Bypass CVE-2025-61673 8.6 HighOctober 3, 2025
• aiven-open pghoard Path Traversal in pghoard CVE-2024-56142 Fix available 4.8 MediumDecember 17, 2024
• aiven journalpump Information Disclosure Vulnerability in Journalpump CVE-2023-51390 6.5 MediumDecember 20, 2023