Aiven

5 CVEs across 9 Aiven products. Browse Aiven vulnerabilities, severities, and proof-of-concept exploits.

Aiven products with known CVEs

ProductCVEs
Aiven-Db-Migrate2
Aiven-Extras2
Aiven1
Aiven-Operator1
Aiven Operator1
Journalpump1
Karapace1
Klaw1
Myhoard1
Aiven CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39961Medium6.82026-04-09Aiven Operator allows you to provision and manage Aiven Services from your Kubernetes cluster. From 0.31.0 to before 0.37.0, a developer with create permission…
CVE-2026-29190Medium4.12026-03-07Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup read…
CVE-2026-25999High7.12026-02-11Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to 2.10.2, there is an improper access control vulnerability that allows una…
CVE-2025-67745High7.12025-12-18MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the w…
CVE-2025-55283Critical9.12025-08-18aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside P…
CVE-2025-55282Critical9.12025-08-18aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser…
CVE-2025-31480Critical9.12025-04-04aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the…
CVE-2023-51390Medium6.52023-12-21journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out…
CVE-2023-32305High8.82023-05-12aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL…