Dmitry Gunchenko

**Name of the Vulnerable Software and Affected Versions** pgsync versions prior to 0.6.7 **Description** The issue concerns the mishandling of syncing the schema with the `--schema-first` and `--schema-only` options, leading to information disclosure of sensitive information. For example, the `sslmode` connection parameter may be lost, resulting in SSL not being used. **Recommendations** For versions prior to 0.6.7, update to version 0.6.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the `--schema-first` and `--schema-only` options until a patch is applied. Restrict access to sensitive information to minimize the risk of exploitation.