rubygems pgsync vulnerabilities

Latest rubygems pgsync CVEs

Newest publication first

1. CVE-2021-31671 Pgsync Contains Cleartext Transmission of Sensitive Information

   Published 2021-04-27

   High·CVSS 7.5 EPSS 0.73% PoC

   pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.