HIGH7.4PyPI
GHSA-27jx-ffw8-xrqv· CVE-2024-3116, PYSEC-2026-1767pgAdmin Remote Code Execution (RCE) vulnerability
Modified: 7/7/2026
package
PyPI/pgadmin4
pkg:pypi/pgadmin4
HIGH7.4PyPI
GHSA-2mvc-557g-5638· CVE-2024-4215, PYSEC-2026-1768pgAdmin is affected by a multi-factor authentication bypass vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-2rrx-pphc-qfv9· CVE-2025-2946, PYSEC-2026-449pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering
Modified: 6/29/2026
HIGH7.4PyPI
GHSA-3p7x-94q9-jq9x· CVE-2026-1707, PYSEC-2026-2864pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
Modified: 7/13/2026
HIGH8.8PyPI
GHSA-3v6v-2x6p-32mc· CVE-2022-4223, PYSEC-2026-893pgadmin4 vulnerable to Code Injection
Modified: 7/7/2026
HIGH7.0PyPI
GHSA-4rhg-h8f2-v4jm· CVE-2026-7818, PYSEC-2026-2865pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager
Modified: 9/10/2026
HIGH7.9PyPI
GHSA-6859-2qxq-ffv2· CVE-2025-9636, PYSEC-2026-1769pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
Modified: 7/7/2026
MEDIUM4.8PyPI
GHSA-6p2c-69cv-3fxq· CVE-2026-7814, PYSEC-2026-2866pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
Modified: 9/10/2026
HIGH8.0PyPI
GHSA-7w6r-748w-mh52· CVE-2023-1907, PYSEC-2026-1770pgAdmin has Incorrect Default Permissions
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-894c-rg7f-3c62· CVE-2023-22298, PYSEC-2026-894pgAdmin 4 Open Redirect vulnerability
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-9crj-hpxh-f6qg· CVE-2023-0241, PYSEC-2026-1771pgAdmin 4 vulnerable to directory traversal
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-cr8c-972v-rmp3· CVE-2022-0959, PYSEC-2026-729pgAdmin 4 Path Traversal vulnerability
Modified: 7/6/2026
HIGH7.5PyPI
GHSA-cvf4-f829-762v· CVE-2025-12764, PYSEC-2026-1772pgAdmin is affected by an LDAP injection vulnerability
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-fxmw-jcgr-w44v· CVE-2025-13780, PYSEC-2026-450pgadmin4 has a Meta-Command Filter Command Execution
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-g4r8-3qmh-pmch· CVE-2025-12765, PYSEC-2026-1773pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification
Modified: 7/7/2026
CRITICAL9.9PyPI
GHSA-g73c-fw68-pwx3· CVE-2025-2945, PYSEC-2026-451pgAdmin 4 Vulnerable to Remote Code Execution
Modified: 6/29/2026
MEDIUM6.0PyPI
GHSA-ghp8-52vx-77j4· CVE-2023-5002, PYSEC-2026-1774pgAdmin failed to properly control the server code
Modified: 7/7/2026
CRITICAL9.9PyPI
GHSA-h2x2-q2mc-24gw· CVE-2026-7813, PYSEC-2026-452pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-hp84-p2gq-6fvr· CVE-2026-7815, PYSEC-2026-2867SQL injection vulnerability in pgAdmin 4 Maintenance Tool
Modified: 9/10/2026
HIGH8.1PyPI
GHSA-hr4r-fwpv-c95j· CVE-2026-7819, PYSEC-2026-2868pgAdmin 4 File Manager has symbolic-link path traversal
Modified: 9/10/2026
MEDIUM6.5PyPI
GHSA-hv9p-2pqf-r5w3· CVE-2026-7820, PYSEC-2026-2869pgAdmin 4: Improper restriction of excessive authentication attempts
Modified: 9/10/2026
HIGH8.8PyPI
GHSA-j74f-g7vx-fh4x· CVE-2026-7816, PYSEC-2026-2870pgAdmin 4: OS command injection vulnerability in Import/Export query export
Modified: 9/10/2026
HIGH8.6PyPI
GHSA-jm9x-rx9x-wpqj· CVE-2024-9014, PYSEC-2026-1775OAuth2 client ID and secret exposed through the web browser
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-p58c-q354-6c4f· CVE-2026-7817, PYSEC-2026-2871pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
Modified: 9/10/2026
CRITICAL9.9PyPI
GHSA-rj98-crf4-g69w· CVE-2024-2044, PYSEC-2026-453pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
Modified: 6/29/2026
MEDIUM6.8PyPI
GHSA-rm79-x4g6-hvg5· CVE-2025-12763, PYSEC-2026-1776pgAdmin 4 has command injection vulnerability on Windows systems
Modified: 7/7/2026
CRITICAL9.1PyPI
GHSA-w2p4-p4rh-qcm3· CVE-2025-12762, PYSEC-2026-454pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode
Modified: 6/29/2026
HIGH7.4PyPI
GHSA-xv64-8p4r-94gq· CVE-2024-4216, PYSEC-2026-1777pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
Modified: 7/7/2026
HIGH7.4PyPI
PYSEC-2026-1767· CVE-2024-3116, GHSA-27jx-ffw8-xrqvpgAdmin Remote Code Execution (RCE) vulnerability
Modified: 7/7/2026
HIGH7.4PyPI
PYSEC-2026-1768· CVE-2024-4215, GHSA-2mvc-557g-5638pgAdmin is affected by a multi-factor authentication bypass vulnerability
Modified: 7/7/2026
HIGH7.9PyPI
PYSEC-2026-1769· CVE-2025-9636, GHSA-6859-2qxq-ffv2pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability
Modified: 7/7/2026
HIGH8.0PyPI
PYSEC-2026-1770· CVE-2023-1907, GHSA-7w6r-748w-mh52pgAdmin has Incorrect Default Permissions
Modified: 7/7/2026
MEDIUM6.5PyPI
PYSEC-2026-1771· CVE-2023-0241, GHSA-9crj-hpxh-f6qgpgAdmin 4 vulnerable to directory traversal
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1772· CVE-2025-12764, GHSA-cvf4-f829-762vpgAdmin is affected by an LDAP injection vulnerability
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1773· CVE-2025-12765, GHSA-g4r8-3qmh-pmchpgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification
Modified: 7/7/2026
MEDIUM6.0PyPI
PYSEC-2026-1774· CVE-2023-5002, GHSA-ghp8-52vx-77j4pgAdmin failed to properly control the server code
Modified: 7/7/2026
HIGH8.6PyPI
PYSEC-2026-1775· CVE-2024-9014, GHSA-jm9x-rx9x-wpqjOAuth2 client ID and secret exposed through the web browser
Modified: 7/7/2026
MEDIUM6.8PyPI
PYSEC-2026-1776· CVE-2025-12763, GHSA-rm79-x4g6-hvg5pgAdmin 4 has command injection vulnerability on Windows systems
Modified: 7/7/2026
HIGH7.4PyPI
PYSEC-2026-1777· CVE-2024-4216, GHSA-xv64-8p4r-94gqpgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload
Modified: 7/7/2026
HIGH7.4PyPI
PYSEC-2026-2864· CVE-2026-1707, GHSA-3p7x-94q9-jq9xpgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability
Modified: 7/13/2026
HIGH7.0PyPI
PYSEC-2026-2865· CVE-2026-7818, GHSA-4rhg-h8f2-v4jmpgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager
Modified: 7/13/2026
MEDIUM4.8PyPI
PYSEC-2026-2866· CVE-2026-7814, GHSA-6p2c-69cv-3fxqpgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
Modified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-2867· CVE-2026-7815, GHSA-hp84-p2gq-6fvrSQL injection vulnerability in pgAdmin 4 Maintenance Tool
Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2868· CVE-2026-7819, GHSA-hr4r-fwpv-c95jpgAdmin 4 File Manager has symbolic-link path traversal
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2869· CVE-2026-7820, GHSA-hv9p-2pqf-r5w3pgAdmin 4: Improper restriction of excessive authentication attempts
Modified: 7/13/2026
HIGH8.8PyPI
PYSEC-2026-2870· CVE-2026-7816, GHSA-j74f-g7vx-fh4xpgAdmin 4: OS command injection vulnerability in Import/Export query export
Modified: 7/13/2026
MEDIUM6.5PyPI
PYSEC-2026-2871· CVE-2026-7817, GHSA-p58c-q354-6c4fpgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-449· CVE-2025-2946, GHSA-2rrx-pphc-qfv9pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-450· CVE-2025-13780, GHSA-fxmw-jcgr-w44vpgadmin4 has a Meta-Command Filter Command Execution
Modified: 7/1/2026
CRITICAL9.9PyPI
PYSEC-2026-451· CVE-2025-2945, GHSA-g73c-fw68-pwx3pgAdmin 4 Vulnerable to Remote Code Execution
Modified: 7/1/2026
CRITICAL9.9PyPI
PYSEC-2026-452· CVE-2026-7813, GHSA-h2x2-q2mc-24gwpgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules
Modified: 7/1/2026
CRITICAL9.9PyPI
PYSEC-2026-453· CVE-2024-2044, GHSA-rj98-crf4-g69wpgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
Modified: 7/1/2026
CRITICAL9.1PyPI
PYSEC-2026-454· CVE-2025-12762, GHSA-w2p4-p4rh-qcm3pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode
Modified: 7/1/2026
MEDIUM6.5PyPI
PYSEC-2026-729· CVE-2022-0959, GHSA-cr8c-972v-rmp3pgAdmin 4 Path Traversal vulnerability
Modified: 7/6/2026
HIGH8.8PyPI
PYSEC-2026-893· CVE-2022-4223, GHSA-3v6v-2x6p-32mcpgadmin4 vulnerable to Code Injection
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-894· CVE-2023-22298, GHSA-894c-rg7f-3c62pgAdmin 4 Open Redirect vulnerability
Modified: 7/7/2026