PT-2026-50728 · Pypi · Pghoard

CVE-2026-54711

Published

2026-06-18

Updated

2026-07-13

CVSS v4.0

2.4

Low

Vector

AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description Database connection information, including the username and password, is logged at the debug level when using .pgpass.

Recommendations Upgrade to version 2.7.1 or greater. Filter out debug-level logs.

Fix

Insertion into Log File

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-54711

GHSA-MPX4-JMPR-VM8V

PYSEC-2026-2872

Pghoard