[Git][security-tracker-team/security-tracker][master] Add new batch of pgadmin4 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
1568d3a9 by Salvatore Bonaccorso at 2026-10-31T10:03:35+01:00
Add new batch of pgadmin4 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -280,35 +280,35 @@ CVE-2026-116522 (The Relevanssi \u2013 A Better Search plugin for WordPress is v
 CVE-2026-116520 (The PPWP \u2013 Password Protect Pages plugin for WordPress is vulnera ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-116252 (pgAdmin 4's materialized view refresh passed the target database's nam ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116251 (pgAdmin 4 did not invalidate a user's existing sessions when their pas ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116250 (In server mode pgAdmin 4 validates a path a user gives for a file in t ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116249 (In server mode pgAdmin 4 resolves a server's password file, SSL certif ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116248 (In pgAdmin 4 server mode only administrators are meant to share a serv ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116247 (When a server in pgAdmin 4 had no password file, client certificate or ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116246 (To pass a server's password to psql and to the utilities pgAdmin 4 run ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116245 (libpq looks a connection service up in the service file of the operati ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116244 (When a pgAdmin 4 connection was not meant to use a Kerberos user's del ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116243 (pgAdmin 4 runs pg_dump, pg_restore, pg_dumpall and psql from the binar ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116242 (pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it nei ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116241 (pgAdmin 4's Import/Export Data tool wraps a user's query export in a p ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116240 (In server mode pgAdmin 4 validates a path into the user's storage dire ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116239 (In server mode pgAdmin 4 keeps an account per authentication source, s ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-116238 (In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATT ...)
-	TODO: check
+	- pgadmin4 <itp> (bug #834129)
 CVE-2026-115840 (The VikRentCar Car Rental Management System plugin for WordPress is vu ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-115830 (In Secret Server versions earlier than 12.3.1, a user under certain co ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1568d3a9549ed1a3e98de159ff4b7994906987e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/1568d3a9549ed1a3e98de159ff4b7994906987e5
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/cec5aa1b/attachment.htm>