Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/pgsync@0.3.1
purl pkg:gem/pgsync@0.3.1
Next non-vulnerable version 0.6.7
Latest non-vulnerable version 0.6.7
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-9vzu-jxpm-hydw
Aliases:
CVE-2021-31671
GHSA-72rj-36qc-47g7
Connection security vulnerability with schema sync pgsync drops connection parameters when syncing the schema with the --schema-first and --schema-only options. Some of these parameters may affect security. For instance, if sslmode is dropped, the connection may not use SSL. The first connection parameter is not affected. pgsync drops connection parameters when syncing the schema with the `--schema-first` and `--schema-only` options. Some of these parameters may affect security. For instance, if `sslmode` is dropped, the connection may not use SSL. The first connection parameter is not affected. An example where `sslmode` is dropped (`connect_timeout` is not affected): ```yaml from: postgres://user:pass@host/dbname?connect_timeout=10&sslmode=require ``` This applies to both the `to` and `from` connections.
0.6.7
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T20:50:11.610163+00:00 GitLab Importer Affected by VCID-9vzu-jxpm-hydw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/pgsync/CVE-2021-31671.yml 38.6.0