https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:44:46.065712+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-2945 CVE-2025-2945 — pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment 2026-10-05T04:44:46.068418+00:00

Affected: pgadmin.org pgAdmin 4

Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).

The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.

This issue affects pgAdmin 4: before 9.2.

 https://cve.radiocsirt.org/vuln/ghsa-g73c-fw68-pwx3 GHSA-g73c-fw68-pwx3 — pgAdmin 4 Vulnerable to Remote Code Execution 2026-10-05T04:44:46.068474+00:00

Affected: PyPI: pgadmin4

Remote Code Execution security vulnerability in pgAdmin 4 (Query Tool and Cloud Deployment modules).

The vulnerability is associated with the 2 POST endpoints; /sqleditor/query_tool/download, where the query_commited parameter and /cloud/deploy endpoint, where the high_availability parameter is unsafely passed to the Python eval() function, allowing arbitrary code execution.

This issue affects pgAdmin 4: before 9.2.