Aiven-Open

Products

ProductCVEsExploitedLatest
klaw3–Jun 2, 2026
pghoard3–Oct 23, 2026
karapace2–Mar 7, 2026
bigquery-connector-for-apache-kafka1–Jan 16, 2026
journalpump1–Dec 20, 2023
myhoard1–Dec 18, 2025

Exploited and recent CVEs

  • CVE-2026-54711 Low 2.4 PGHoard: Password written to debug log 0.2%
  • CVE-2026-63120 High 8.4 PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write 0.4%
  • CVE-2026-45080 Medium 6.9 Klaw: Improper Access Control Allows Disclosure of Password Hash 0.2%
  • CVE-2026-44367 Low 2.7 Klaw: user lockout due to case sensitivity inconsistency 0.2%
  • CVE-2026-29190 Medium 4.1 Karapace: Path Traversal in Backup Reader 0.4%
  • CVE-2026-25999 High 7.1 Klaw has an improper authorisation check on /resetMemoryCache 0.3%
  • CVE-2026-23529 High 7.7 Arbitrary File Read in Google BigQuery Sink connector 0.4%
  • CVE-2025-67745 High 7.1 Myhoard logs backup encryption key in plain text 0.2%
  • CVE-2025-61673 High 8.6 Karapace is vulnerable to Authentication Bypass 0.4%
  • CVE-2024-56142 Medium 6.5 Path Traversal in pghoard 0.4%
  • CVE-2023-51390 Medium 6.5 Information Disclosure Vulnerability in Journalpump 0.3%