Information Disclosure

pghero is vulnerable to Information Disclosure. The vulnerability exists because the explain function in home_controller.rb does not properly handle sensitive information in the error message of query results, allowing an attacker to access sensitive information.