Now, I know that technically It isn't really keepass fault but windows, that's why I'm not blaming Dominik for it, but in my opinion this is still an issue that is definitely worth mentioning on his 'Security issues' web page. Even, If windows doesn't cache these passwords, It's still annoying because an attacker can AT THE VERY LEAST, access it a few hours after closing your database. It is kind of dangerous, because windows can cache these passwords somewhere else, allowing an attacker to access your passwords a long time after closing it. Unfortunately, keepass fails to prevent windows from making a copy of your passwords in memory. Preventing a thief or someone seizing your computer from accessing your passwords, when the database is locked/closed.

Preventing people from accessing your passwords without compromising your computer (NOT sending your passwords over the internet without your consent, NOT autofilling your passwords in malicious hidden forms, no security flaw allowing to easily decrypt.

From a security point of view, keepass only has two duties:

Keepass review