FEDORA-2026-34c2bf6df4 — security update for pgadmin4

stable

pgadmin4-9.14-3.fc44

FEDORA-2026-34c2bf6df4 created by smani 4 months ago for Fedora 44

Update axios to 1.15.0, fixes CVE-2026-40175 and CVE-2025-62718.

Update to pgadmin4-9.14.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2026-34c2bf6df4

This update has been submitted for testing by smani.

4 months ago

This update's test gating status has been changed to 'ignored'.

4 months ago

This update has obsoleted pgadmin4-9.14-2.fc44, and has inherited its bugs and notes.

4 months ago

This update has been pushed to testing.

4 months ago

This update has been submitted for stable by bodhi.

There is an ongoing freeze; this will be pushed to stable after the freeze is over.

4 months ago

This update has been pushed to stable.

4 months ago

Please log in to add feedback.

Metadata

Type

security

Severity

urgent

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

4 months ago

in testing

4 months ago

in stable

4 months ago

approved

4 months ago

Builds

pgadmin4-9.14-3.fc44

BZ#2454043 CVE-2026-4800 pgadmin4: lodash: Arbitrary code execution via untrusted input in template imports [fedora-all]

BZ#2454310 pgadmin4-9.14 is available

BZ#2454886 Query Tool crashes with React error #130 in pgAdmin 9.14 (regression from 9.13)

BZ#2456577 CVE-2026-39865 pgadmin4: Axios: Denial of Service via HTTP/2 session cleanup logic state corruption [fedora-all]

BZ#2457505 CVE-2025-62718 pgadmin4: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization [fedora-all]

BZ#2457878 CVE-2026-40175 pgadmin4: Axios: Remote Code Execution via Prototype Pollution escalation [fedora-all]

pgadmin4-9.14-3.fc44

Automated Test Results

ignored