pgadmin4 vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-7818Highpgadmin4: pgAdmin 4 has deserialization of untrusted data in its FileBackedSessionManager CVE-2026-7816Highpgadmin4: pgAdmin 4: OS command injection vulnerability in Import/Export query export CVE-2026-7817Highpgadmin4: pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities CVE-2026-7820Mediumpgadmin4: pgAdmin 4: Improper restriction of excessive authentication attempts CVE-2026-7814Mediumpgadmin4: pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer…CVE-2026-7819Highpgadmin4: pgAdmin 4 File Manager has symbolic-link path traversal CVE-2026-7815Highpgadmin4: SQL injection vulnerability in pgAdmin 4 Maintenance Tool CVE-2026-7813Criticalpgadmin4: pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared…CVE-2026-1707Highpgadmin4: pgadmin4 affected by a Restore restriction bypass via key disclosure vulnerability CVE-2025-13780Criticalpgadmin4: pgadmin4 has a Meta-Command Filter Command Execution CVE-2025-12765Highpgadmin4: pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate…CVE-2025-12764Highpgadmin4: pgAdmin is affected by an LDAP injection vulnerability CVE-2025-12763Mediumpgadmin4: pgAdmin 4 has command injection vulnerability on Windows systems CVE-2025-12762Criticalpgadmin4: pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode CVE-2025-9636Highpgadmin4: pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability CVE-2025-2946Criticalpgadmin4: pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering CVE-2025-2945Criticalpgadmin4: pgAdmin 4 Vulnerable to Remote Code Execution CVE-2023-1907Highpgadmin4: pgAdmin has Incorrect Default Permissions CVE-2024-9014Highpgadmin4: OAuth2 client ID and secret exposed through the web browser CVE-2024-4215Mediumpgadmin4: pgAdmin is affected by a multi-factor authentication bypass vulnerability CVE-2024-4216HighpgAdmin4: pgAdmin Cross-site Scripting vulnerability in /settings/store API response json payload CVE-2024-3116Highpgadmin4: pgAdmin Remote Code Execution (RCE) vulnerability CVE-2024-2044CriticalpgAdmin4: pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user CVE-2023-5002Mediumpgadmin4: pgAdmin failed to properly control the server code CVE-2023-0241Mediumpgadmin4: pgAdmin 4 vulnerable to directory traversal

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo