https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T21:57:58.650352+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/pysec-2026-2872 PYSEC-2026-2872 — PGHoard: Password written to debug log 2026-10-12T21:57:58.651735+00:00

Affected: PyPI: pghoard

### Impact When using .pgpass, database connection information including the username and password will be logged at the debug level.

### Patches Upgrade to version 2.7.1 or greater.

### Workarounds Filter out debug-level logs.

### References This issue was discovered by BugCrowd user DRAKOKORIAN.