CVE-2025-2946
2 advisories.
PyPI/pgadmin4 CVE-2025-2946: critical 9.1, EPSS 0.32%
pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering
Action: Upgrade pgadmin4 to 9.2 or later.
pip install pgadmin4==9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2 | - |
Fixed versions
| 9.2 |
Sources
- osv: GHSA-2rrx-pphc-qfv9
- https://nvd.nist.gov/vuln/detail/CVE-2025-2946
- https://github.com/pgadmin-org/pgadmin4/issues/8602
- https://github.com/pgadmin-org/pgadmin4/commit/1305d9910beefd0d6b4c7eb4f111f86edb1d356b
- https://github.com/pgadmin-org/pgadmin4
CVE-2025-2946 · published · modified · JSON
PyPI/pgadmin4 CVE-2025-2946: critical 9.1, EPSS 0.32%
pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering
Action: Upgrade pgadmin4 to 9.2 or later.
pip install pgadmin4==9.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.2 | - |
Fixed versions
| 9.2 |
Sources
- osv: PYSEC-2026-449
- https://nvd.nist.gov/vuln/detail/CVE-2025-2946
- https://github.com/pgadmin-org/pgadmin4/issues/8602
- https://github.com/pgadmin-org/pgadmin4/commit/1305d9910beefd0d6b4c7eb4f111f86edb1d356b
- https://github.com/pgadmin-org/pgadmin4
- https://pypi.org/project/pgadmin4
- https://github.com/advisories/GHSA-2rrx-pphc-qfv9
CVE-2025-2946 · published · modified · JSON