TI-2025-38105 CVE-2025-61673
Karapace is vulnerable to Authentication Bypass
Priority MEDIUM 43
Karapace is an open-source implementation of Kafka REST and Schema Registry.
Aiven-Open
Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Aiven-Open records in CISA KEVNo Aiven-Open vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
16 records
TI-2025-34940 CVE-2025-55283
aiven-db-migrate allows Privilege Escalation through use of psql during migration
Priority MEDIUM 42
aiven-db-migrate is an Aiven database migration tool.
TI-2025-22661 CVE-2025-31480
aiven-extras allows PostgreSQL Privilege Escalation through format function
Priority MEDIUM 42
aiven-extras is a PostgreSQL extension.
TI-2025-34939 CVE-2025-55282
aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration
Priority MEDIUM 40
aiven-db-migrate is an Aiven database migration tool.
Priority LOW 39
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores.
TI-2023-15599 CVE-2023-32305
aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path
Priority LOW 39
aiven-extras is a PostgreSQL extension.
Priority LOW 36
Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.
Priority LOW 34
Kafka Connect BigQuery Connector is an implementation of a sink connector from Apache Kafka to Google BigQuery.
Priority LOW 33
journalpump is a daemon that takes log messages from journald and pumps them to a given output.
Priority LOW 32
MyHoard is a daemon for creating, managing and restoring MySQL backups.
Priority LOW 31
Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.
TI-2026-28817 CVE-2026-39961 · GHSA-99j8-wv67-4c72
Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource
Priority LOW 30
Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster.
TI-2026-23307 CVE-2026-29190
Karapace: Path Traversal in Backup Reader
Priority LOW 24
Karapace is an open-source implementation of Kafka REST and Schema Registry.
TI-2024-37135 CVE-2024-56142 · GHSA-m9hc-vxjj-4x6q
Path Traversal in pghoard
Priority LOW 22
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores.
Priority LOW 13
Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal.
TI-2026-79608 CVE-2026-54711
PGHoard writes database passwords to debug log
Priority LOW 11
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores.