EUVD-2026-29085

Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...

CVE-2025-0151

creationtimestamp| type| source ---|---|--- 2025-03-11 11:28:45+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lk3xm6jwfh2w 2025-03-11 19:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114145527668165612 2025-03-11 20:46:21+00:00| seen|...