cve.bz

CVE-2021-31671

7.5 highEPSS 0.7%

High (7.5) in pgsync project pgsync. EPSS 0.7% chance of exploitation in the next 30 days. Fixed in pgsync 0.6.7.

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
CWE
CWE-319
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-72rj-36qc-47g7RubyGemspgsync<0.6.70.6.7

References

Check your stackJSON