Aiven-Open
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| klaw | 3 | – | Jun 2, 2026 |
| pghoard | 3 | – | Oct 23, 2026 |
| karapace | 2 | – | Mar 7, 2026 |
| bigquery-connector-for-apache-kafka | 1 | – | Jan 16, 2026 |
| journalpump | 1 | – | Dec 20, 2023 |
| myhoard | 1 | – | Dec 18, 2025 |
Exploited and recent CVEs
- CVE-2026-54711 PGHoard: Password written to debug log 0.2%
- CVE-2026-63120 PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write 0.4%
- CVE-2026-45080 Klaw: Improper Access Control Allows Disclosure of Password Hash 0.2%
- CVE-2026-44367 Klaw: user lockout due to case sensitivity inconsistency 0.2%
- CVE-2026-29190 Karapace: Path Traversal in Backup Reader 0.4%
- CVE-2026-25999 Klaw has an improper authorisation check on /resetMemoryCache 0.3%
- CVE-2026-23529 Arbitrary File Read in Google BigQuery Sink connector 0.4%
- CVE-2025-67745 Myhoard logs backup encryption key in plain text 0.2%
- CVE-2025-61673 Karapace is vulnerable to Authentication Bypass 0.4%
- CVE-2024-56142 Path Traversal in pghoard 0.4%
- CVE-2023-51390 Information Disclosure Vulnerability in Journalpump 0.3%