Skip to content
OpenAdvisories

Vendor

Aiven-Open

11 known vulnerabilities.

Products

pghoard 3 klaw 3 karapace 2 journalpump 1 myhoard 1 bigquery-connector-for-apache-kafka 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-45080

    Klaw: Improper Access Control Allows Disclosure of Password Hash

    Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has been patched in version 2.10.4.

    Aiven-Open klaw
  • Medium 4.1
    CVE-2026-29190

    Karapace: Path Traversal in Backup Reader

    Karapace is an open-source implementation of Kafka REST and Schema Registry. Prior to version 6.0.0, there is a Path Traversal vulnerability in the backup reader (backup/backends/v3/backend.py). If a malicious backup file is provided to Karapace, an attacker …

    Aiven-Open karapace
  • Medium 4.8
    CVE-2024-56142

    Path Traversal in pghoard

    pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unin…

    Aiven-Open pghoard pghoard PyPI
  • Medium 6.5
    CVE-2023-51390

    Information Disclosure Vulnerability in Journalpump

    journalpump is a daemon that takes log messages from journald and pumps them to a given output. A logging vulnerability was found in journalpump which logs out the configuration of a service integration in plaintext to the supplied logging pipeline, including…

    Aiven-Open journalpump