| pgAdmin 4: Improper restriction of excessive authentication attemptsCVE-2026-7820 · GHSA-HV9P-2PQF-R5W3Version ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
| pgAdmin 4 File Manager has symbolic-link path traversalCVE-2026-7819 · GHSA-HR4R-FWPV-C95JVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| SQL injection vulnerability in pgAdmin 4 Maintenance ToolCVE-2026-7815 · GHSA-HP84-P2GQ-6FVRVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4: OS command injection vulnerability in Import/Export query exportCVE-2026-7816 · GHSA-J74F-G7VX-FH4XVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilitiesCVE-2026-7817 · GHSA-P58C-Q354-6C4FVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modulesCVE-2026-7813 · GHSA-H2X2-Q2MC-24GWVersion ranges need review. |
pgadmin4 |
PyPI |
Critical
|
Fix reported |
|
| pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManagerCVE-2026-7818 · GHSA-4RHG-H8F2-V4JMVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modulesCVE-2026-7814 · GHSA-6P2C-69CV-3FXQVersion ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
| pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerabilityCVE-2026-1707 · GHSA-3P7X-94Q9-JQ9XVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verificationCVE-2025-12765 · GHSA-G4R8-3QMH-PMCHVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4 has command injection vulnerability on Windows systemsCVE-2025-12763 · GHSA-RM79-X4G6-HVG5Version ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
| pgAdmin failed to properly control the server code CVE-2023-5002 · GHSA-GHP8-52VX-77J4Version ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
| pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerabilityCVE-2025-9636 · GHSA-6859-2QXQ-FFV2Version ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin has Incorrect Default PermissionsCVE-2023-1907 · GHSA-7W6R-748W-MH52Version ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin is affected by a multi-factor authentication bypass vulnerabilityCVE-2024-4215 · GHSA-2MVC-557G-5638Version ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
| pgAdmin is affected by an LDAP injection vulnerabilityCVE-2025-12764 · GHSA-CVF4-F829-762VVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin Remote Code Execution (RCE) vulnerabilityCVE-2024-3116 · GHSA-27JX-FFW8-XRQVVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| OAuth2 client ID and secret exposed through the web browserCVE-2024-9014 · GHSA-JM9X-RX9X-WPQJVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payloadCVE-2024-4216 · GHSA-XV64-8P4R-94GQVersion ranges need review. |
pgadmin4 |
PyPI |
High
|
Fix reported |
|
| pgAdmin 4 vulnerable to directory traversal CVE-2023-0241 · GHSA-9CRJ-HPXH-F6QGVersion ranges need review. |
pgadmin4 |
PyPI |
Medium
|
Fix reported |
|
