ZDS-2025-0135LOW3.7CWE-532PATCHEDdisclosed 2025-04-02

Default entrypoint logs PG password to stdout on retry

/summary

Summary

Connection retry loop accidentally echoes POSTGRES_PASSWORD into container logs aggregated by most cloud providers.

/poc

Proof-of-concept

# Reproduction steps redacted under coordinated disclosure.
# Full PoC will be published with the advisory at embargo expiry.

$ zds reproduce ZDS-2025-0135
ZDS-2025-0135 — Default entrypoint logs PG password to stdout on retry · ZeroDayShield