Skip to content
Heist/ feed
Back to feed
High

Security advisory

Type: advisorySources: OSVCVE: CVE-2021-31671

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2021-31671
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 11:45 UTC · Revision 1

Source evidence

CVE-2021-31671

core-osv · Original source

Published 27 Apr 2021, 03:15 UTC

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

osv:CVE-2021-31671
Complete source record
{
  "id": "2bfe28910a554c7bb0db03d7c9aeec75fbffe8d90b3c970cb14ee772f3920c97",
  "url": "https://osv.dev/vulnerability/CVE-2021-31671",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "CVE-2021-31671",
    "summary": "pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.",
    "evidence": "osv:CVE-2021-31671",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2021-31671",
      "aliases": [
        "CVE-2021-31671",
        "GHSA-72rj-36qc-47g7"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/ankane/pgsync",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "c48f9376f49092a3e9ae2743589bf1532fc62572"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:pgsync_project:pgsync:*:*:*:*:*:*:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.6.7"
                      }
                    ],
                    "source": "CPE_RANGE"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.6.6",
            "v0.6.5",
            "v0.6.4",
            "v0.6.3",
            "v0.6.2",
            "v0.6.1",
            "v0.6.0",
            "v0.5.5",
            "v0.5.4",
            "v0.5.3",
            "v0.5.2",
            "v0.5.1",
            "v0.5.0",
            "v0.4.3",
            "v0.4.2",
            "v0.4.1",
            "v0.4.0",
            "v0.3.9",
            "v0.3.8",
            "v0.3.7",
            "v0.3.6",
            "v0.3.5",
            "v0.3.4",
            "v0.3.3",
            "v0.3.2",
            "v0.3.1",
            "v0.3.0",
            "v0.2.4",
            "v0.2.2",
            "v0.2.3",
            "v0.2.1",
            "v0.2.0",
            "v0.1.1",
            "v0.1.0"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-31671.json"
          }
        }
      ],
      "modified": "2026-10-20T10:54:40.773339899Z",
      "provider": "osv",
      "references": [
        "https://github.com/ankane/pgsync/issues/121"
      ],
      "provider_metadata": {}
    },
    "related_cves": [
      {
        "value": "CVE-2021-31671",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 385873,
  "published_at": "2021-04-27T03:15:07.647+00:00"
}