[GHSA-g73c-fw68-pwx3] pgAdmin 4 Vulnerable to Remote Code Execution

[py0zz1]

Updates

• References

Comments
reference link

[andresM80]

copyrhgt notis andres miranda

[py0zz1]

copyrhgt notis andres miranda

I understood it to mean to notify the copyright. What can I do?

[shelbyc]

Hi @py0zz1, I'm not sure what @andresM80 is talking about.

With respect to the reference link https://gist.github.com/py0zz1/a81c0e3222dac3772bf44ae5eb8cfd1e, I recommend that you email cna@postgresql.org to ask to have the link added to the CVE record. cna@postgresql.org is the email for PostgreSQL, the CNA that assigned CVE-2025-2945 to the vulnerability. That will lead to the reference link being available in the most upstream resource possible and will lead to GitHub ingesting the new reference link when the CVE record is updated.

[py0zz1]

@shelbyc Oh, I understand. Thank you for explaining it in detail.