pghoard vulnerabilities

CVEs whose affected-version data names the pghoard package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

3 CVEsRSS

CVE-2026-63120High· 8.4

4d ago

PGHoard: Incomplete Path Traversal fix in restore.py allows Arbitrary File Write

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.2, an incomplete path traversal fix in pghoard allows an attacker with write access to the backup object stora…

▾ TwilightAiven-Open · pghoardEPSS 0.40%via CVEORG

CVE-2026-54711Low· 2.4

4d ago

PGHoard: Password written to debug log

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at t…

▾ SunlitAiven-Open · pghoardEPSS 0.16%via CVEORG

CVE-2024-56142Medium· 6.5

1y ago

PGHoard Path Traversal vulnerability

▾ Sunlitpghoard · pghoardEPSS 0.41%via OSV