Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-12763
6.8
MEDIUMCVSS v3
Published
November 13, 2025
Affected
1 project
Assigned by
f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Severity scale
010
Description
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input.
pgadmin-org/pgadmin4
GitHubpgAdmin is the most popular and feature rich Open Source administration and development platform for PostgreSQL, the most advanced Open Source database in the world.
GitHubpgAdmin is the most popular and feature rich Open Source administration and development platform for PostgreSQL, the most advanced Open Source database in the world.< 9.10NVD