Information Disclosure

pgsync is vulnerable to information disclosure. The use of --schema-first and --schema-only options to sync the schema results in disclosure of confidential information due to the sslmode connection parameter being established without SSL.