Technologyglobal✓ verified · 90%
PGHoard: Password written to debug log
- When
- Where
- Global (internet)
- Category
- cyber_advisory · pip
### Impact When using .pgpass, database connection information including the username and password will be logged at the debug level. ### Patches Upgrade to version 2.7.1 or greater. ### Workarounds Filter out debug-level logs. ### References This issue was discovered by BugCrowd user DRAKOKORIAN.
Sources
- GitHub Advisory Database ↗ · first seen 2026-06-18 15:05 UTC
Defaxon links out to the original reporting and never republishes article text.
Correlated events
Computed by the Defaxon correlation engine — linked by shared actors, co-location, and temporal proximity. Scored hypotheses, never causal claims.
No correlated events found in the current window. As more events arrive, connections form automatically.