[GHSA-g73c-fw68-pwx3] pgAdmin 4 Vulnerable to Remote Code Execution

[py0zz1]

Updates

• References

Comments
reference link

[ghost]

copyrhgt notis andres miranda

[py0zz1]

copyrhgt notis andres miranda

I understood it to mean to notify the copyright. What can I do?

[shelbyc]

Hi @py0zz1, I'm not sure what @andresM80 is talking about.

With respect to the reference link https://gist.github.com/py0zz1/a81c0e3222dac3772bf44ae5eb8cfd1e, I recommend that you email cna@postgresql.org to ask to have the link added to the CVE record. cna@postgresql.org is the email for PostgreSQL, the CNA that assigned CVE-2025-2945 to the vulnerability. That will lead to the reference link being available in the most upstream resource possible and will lead to GitHub ingesting the new reference link when the CVE record is updated.

[py0zz1]

@shelbyc Oh, I understand. Thank you for explaining it in detail.

[github-actions]

👋 This pull request has been marked as stale because it has been open with no activity. You can: comment on the issue or remove the stale label to hold stale off for a while, add the Keep label to hold stale off permanently, or do nothing. If you do nothing this pull request will be closed eventually by the stale bot. Please see CONTRIBUTING.md for more policy details.