1 matches found
CVE-2026-17346: Improper Neutralization of Special Elements used in an SQL Command
The fix for CVE-2026-12044 in pgAdmin 4 9.16 hardened qtLiteral and switched sixteen COMMENT ON / pgstattuple / pgstatindex templates to it, but missed several sinks that had been placed in testsqlstringliterallint.py's ALLOWLIST on the incorrect assumption that schema, table, publication, and...
8.8CVSS5.9AI score0.00615EPSS
SaveExploits0References5
20