Skip to content
OpenAdvisories

Product · Aiven-Open

pghoard

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.4
    CVE-2026-63120

    PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write

    pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object storage (such as S3, GCS, o…

    Aiven-Open pghoard