{"action":"Upgrade pgadmin4 to 8.12 or later.","affected":[{"fixed":"8.12","introduced":"0"}],"component":"pgadmin4","cve_ids":["CVE-2024-9014"],"ecosystem":"PyPI","epss":0.09685,"exploited":false,"fixed_versions":["8.12"],"ghsa_id":"GHSA-jm9x-rx9x-wpqj","id":"tcs_01M5KFP820RDQN0HT7199YYJAG","modified_at":"2026-07-07T17:56:43.843490929Z","published_at":"2024-09-23T18:30:34Z","references":["https://osv.dev/vulnerability/GHSA-jm9x-rx9x-wpqj","https://nvd.nist.gov/vuln/detail/CVE-2024-9014","https://github.com/pgadmin-org/pgadmin4/issues/7945","https://github.com/pgadmin-org/pgadmin4","https://www.pgadmin.org/docs/pgadmin4/8.12/release_notes_8_12.html"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-jm9x-rx9x-wpqj","url":"https://osv.dev/vulnerability/GHSA-jm9x-rx9x-wpqj"}],"summary":"OAuth2 client ID and secret exposed through the web browser"}