Vendor
Aiven
9 known vulnerabilities in products by Aiven, 0 of them actively exploited (CISA KEV).
Key figures
9
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-55282 | aiven-db-migrate allows Privilege Escalation via unrestricted search_path during migration | 9.1 | |
| Critical | CVE-2025-55283 | aiven-db-migrate allows Privilege Escalation through use of psql during migration | 9.1 | |
| High | CVE-2023-32305 | aiven-extras PostgreSQL Privilege Escalation Through Overloaded Search Path | 8.8 | |
| Critical | CVE-2025-31480 | aiven-extras allows PostgreSQL Privilege Escalation through format function | 9.1 | |
| High | CVE-2026-25999 | Klaw has an improper authorisation check on /resetMemoryCache | 7.1 | |
| Medium | CVE-2026-39961 | Aiven Operator has cross-namespace secret exfiltration via ClickhouseUser connInfoSecretSource | 4.9 | |
| High | CVE-2025-67745 | Myhoard logs backup encryption key in plain text | 7.1 | |
| Medium | CVE-2026-29190 | Karapace: Path Traversal in Backup Reader | 4.1 | |
| High | CVE-2023-51390 | Information Disclosure Vulnerability in Journalpump | 6.5 |