{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.0"}],"component":"pghoard","cve_ids":["CVE-2026-54711"],"ecosystem":"PyPI","epss":0.00156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mpx4-jmpr-vm8v","id":"tcs_01M5KFRDYSA3FX79928XZSH943","modified_at":"2026-07-13T16:42:55.738011130Z","published_at":"2026-06-18T15:05:20Z","references":["https://osv.dev/vulnerability/GHSA-mpx4-jmpr-vm8v","https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v","https://github.com/Aiven-Open/pghoard"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-mpx4-jmpr-vm8v","url":"https://osv.dev/vulnerability/GHSA-mpx4-jmpr-vm8v"}],"summary":"PGHoard: Password written to debug log"}