Vendor
An unauthenticated exposure of Go pprof debug endpoints in postgres-exporter allows remote attackers to perform information disclosure of credentials and process memory or trigger a denial of service.