aiven-extras vulnerabilities

2 known vulnerabilities in aiven-extras from Aiven. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  aiven-extras: Untrusted Search Path

  CVE-2025-31480Apr 4, 2025Aiven

  aiven-extras is a PostgreSQL extension. This is a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages the format function not being schema-prefixed. Affe

• 8.8 High severity

  aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation…

  CVE-2023-32305May 12, 2023Aiven

  aiven-extras is a PostgreSQL extension. Versions prior to 1.1.9 contain a privilege escalation vulnerability, allowing elevation to superuser inside PostgreSQL databases that use the aiven-extras package. The vulnerability leverages missing schema qualifiers o