Aiven vulnerabilities
We track 4 vulnerabilities in Aiven products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 18, 2025.
Latest Aiven vulnerabilities
- 7.2 High severity
aiven-db-migrate: Improper Neutralization of Special Elements used in a Command
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows elevation to superuser inside PostgreSQL databases during a migration from an untrusted source server. The vulnerability stems from
- 7.2 High severity
aiven-db-migrate: Improper Limitation of a Pathname to a Restricted Directory
aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that allows a user to elevate to superuser inside PostgreSQL databases during a migration from an untrusted source server. By exploiting a lack
- 9.1 Critical severity
aiven-extras: Untrusted Search Path
aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages the format function not being schema-prefixed. Affe
- 8.8 High severity
aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation…
aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers o