CVE-2026-54711Low· 2.4▾ Sunlitpghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
— → 2.4
0.2%
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.
pghoard < 2.7.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
pghoard <= 2.1.0Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-63120High· 8.4PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write
CVE-2024-56142Medium· 6.5PGHoard Path Traversal vulnerability
CVE-2026-116691Medium· 6.5MLflow CrewAI autologging records LLM provider API keys in logged trace spans
CVE-2026-107293Medium· 5.3Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-107291Medium· 4.3Pydantic AI is a Python agent framework for building applications and workflows with Generative AI
CVE-2026-86049High· 7.1Jupyter Server is the backend for Jupyter web applications