CVE-2021-31671: Pgsync Project Pgsync

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Affected products

• Pgsync Project Pgsync: before 0.6.7 (fixed in 0.6.7)

Published 2021-04-27. Last modified 2026-06-17.