Low
PGHoard: Password written to debug log
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.
Announced Group revision 1
Original source ↗CVE-2026-54711
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-54711
pghoard
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Aiven-Open",
"product": "pghoard",
"versions": [
{
"status": "affected",
"version": "< 2.7.1"
}
]
}
]- Related CVEs
- CVE-2026-54711
Source reference:
/cveMetadata/cveId
Publisher severity
low
Source reference: /containers/cna/metrics
- Event
- #52771 · Revision 1
- Added to Heist Feed
- Publisher date