You don't host anything with KeePass, it's an application that you install. People use this type of software literally every single day. I'm not sure where you get your information from. There was no "leak", it was an attack that someone could execute if they had access to your physical machine and only used a master password without a keyfile. If someone didn't have that, they don't have your master password, because it doesn't go to the cloud at all. It's all entirely local. Stop handing out misinformation like candy.

edit: the actual CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-32784

Vulnerabilities happen, end of story. Like I said, what matters is the maintainers' reaction and how open they are about the details. If you rely on other people/developers to handle your OpSec for you, then you shouldn't be using computers at all and are putting yourself at risk no matter what software you use.

And if this is your litmus test, then holy shit do I have some bad news for you about iOS/Android/Linux/Windows/macOS/literally any web browser... and I guarantee that whatever you use now for your password manager has it's own share of issues regarding security, which again points back to taking care of your own OpSec instead of relying on others.

Expect shit to hit the fan, and you'll always be prepared when it does.

Explain to me how someone ‘allows’ leaking a password that is used locally on the user's machine in an app that only connects to the web to download website icons.