{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.1.0"}],"component":"pghoard","cve_ids":["CVE-2026-54711"],"ecosystem":"PyPI","epss":0.00156,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-mpx4-jmpr-vm8v","id":"tcs_01M5KH22NGGJCRMVGPJZXVFEVK","modified_at":"2026-07-13T16:32:56.983457365Z","published_at":"2026-07-13T15:46:21.090761Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2872","https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v","https://github.com/Aiven-Open/pghoard","https://pypi.org/project/pghoard","https://github.com/advisories/GHSA-mpx4-jmpr-vm8v","https://nvd.nist.gov/vuln/detail/CVE-2026-54711"],"severity":{"label":"low","score":2.4},"sources":[{"source":"osv","source_id":"PYSEC-2026-2872","url":"https://osv.dev/vulnerability/PYSEC-2026-2872"},{"source":"nvd","source_id":"CVE-2026-54711","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54711"}],"summary":"PGHoard: Password written to debug log"}