Aiven-Open vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20241
3. 20252
4. 20267

Newest CVEs

• CVE-2026-54711

  PGHoard: Password written to debug log

  Aiven-Open · pghoard

  Low2.4
• CVE-2026-63120

  PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write

  Aiven-Open · pghoard

  High8.4
• CVE-2026-45080

  Klaw: Improper Access Control Allows Disclosure of Password Hash

  Aiven-Open · klaw

  Medium6.9
• CVE-2026-44367

  Klaw: user lockout due to case sensitivity inconsistency

  Aiven-Open · klaw

  Low2.7
• CVE-2026-29190

  Karapace: Path Traversal in Backup Reader

  Aiven-Open · karapace

  Medium4.1
• CVE-2026-25999

  Klaw has an improper authorisation check on /resetMemoryCache

  Aiven-Open · klaw

  High7.1
• CVE-2026-23529

  Arbitrary File Read in Google BigQuery Sink connector

  Aiven-Open · bigquery-connector-for-apache-kafka

  High7.7
• CVE-2025-67745

  Myhoard logs backup encryption key in plain text

  Aiven-Open · myhoard

  High7.1
• CVE-2025-61673

  Karapace is vulnerable to Authentication Bypass

  Aiven-Open · karapace

  High8.6
• CVE-2024-56142

  Path Traversal in pghoard

  Aiven-Open · pghoard

  Medium4.8