CVE-2021-31671
1 advisory.
RubyGems/pgsync CVE-2021-31671: high 7.5
Pgsync Contains Cleartext Transmission of Sensitive Information
Action: Upgrade pgsync to 0.6.7 or later.
bundle update pgsyncAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.7 | - |
Fixed versions
| 0.6.7 |
Sources
- osv: GHSA-72rj-36qc-47g7
- https://nvd.nist.gov/vuln/detail/CVE-2021-31671
- https://github.com/ankane/pgsync/issues/121
- https://github.com/ankane/pgsync/commit/05cd18f5fc09407e4b544f2c12f819cabc50c40e
- https://github.com/ankane/pgsync/blob/master/CHANGELOG.md#067-2021-04-26
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pgsync/CVE-2021-31671.yml
CVE-2021-31671 · published · modified · JSON