Skip to content
OpenAdvisories

Product · Aiven-Open

karapace

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.1
    CVE-2026-29190

    Karapace: Path Traversal in Backup Reader

    Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v3/backend.py). If a malicious backup file is provided to Karapace, an attacker …

    Aiven-Open karapace