~ / search / GHSA-72rj-36qc-47g7

GHSA-72rj-36qc-47g7

Pgsync Contains Cleartext Transmission of Sensitive Information

Source: GitHub Advisory Database (reviewed) High CVE-2021-31671

Packages

EcosystemPackageAffectedFixed in
RubyGems pgsync < 0.6.7 0.6.7

Details

As written in the advisory (Markdown source, shown as plain text).

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the `--schema-first` and `--schema-only` options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

References

External links from the advisory. They lead to third-party sites.