ROS-20251029-05

The vulnerability in the pgAdmin 4 database management tool is related to a flaw in the mechanism for source validation. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to protected information...

Security update for pgadmin4

This update for pgadmin4 fixes the following issues: CVE-2025-9636: Fixed cross-origin opener policy COOP vulnerability bsc1249151. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Fedora: Security Advisory (FEDORA-2025-3c80b660e0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 42 : pgadmin4 (2025-3c80b660e0)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3c80b660e0 advisory. Update to pgadmin-9.8. Fixes CVE-2025-9636. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

pgadmin4-9.8-1.1 on GA media (moderate)

pgadmin4-9.8-1.1 on GA media Announcement ID: openSUSE-SU-2025:15612-1 Rating: moderate Cross-References: CVE-2025-9636 CVSS scores: CVE-2025-9636 SUSE : 7.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L CVE-2025-9636 SUSE : 7.3 CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N...

Origin Validation Error

pgadmin4 vulnerable to Origin Validation Error. The vulnerability is due to insufficient COOP header enforcement because of the application failing to set or correctly validate Cross-Origin-Opener-Policy on OAuth and related pages, and an attacker can abuse this by manipulating the OAuth flow...

OPENSUSE-SU-2025:15612-1 pgadmin4-9.8-1.1 on GA media

These are all security issues fixed in the pgadmin4-9.8-1.1 package on the GA media of openSUSE Tumbleweed...

EUVD-2025-0015

Malicious code in bioql PyPI...

EUVD-2024-1871

Malicious code in bioql PyPI...

EUVD-2023-0964

Malicious code in bioql PyPI...

EUVD-2025-26729

Malicious code in bioql PyPI...

EUVD-2025-9604

Malicious code in bioql PyPI...

EUVD-2024-47366

Malicious code in bioql PyPI...

EUVD-2022-1410

Malicious code in bioql PyPI...

EUVD-2024-1364

Malicious code in bioql PyPI...

EUVD-2023-0402

Malicious code in bioql PyPI...

CVE-2025-59420 vulnerabilities

Vulnerabilities for packages: open-webui, pgadmin4, mlflow...

GHSA-9GGR-2464-2J32 vulnerabilities

Vulnerabilities for packages: open-webui, pgadmin4, mlflow...

SUSE CVE-2025-9636

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...

GHSA-6859-2QXQ-FFV2 pgadmin4 is affected by a Cross-Origin Opener Policy (COOP) vulnerability

pgAdmin = 9.7 is affected by a Cross-Origin Opener Policy COOP vulnerability. This vulnerability allows an attacker to manipulate the OAuth flow, potentially leading to unauthorised account access, account takeover, data breaches, and privilege escalation...