Threats tagged 'ghsa-835v-3mj2-2w29'

A vulnerability in pgAdmin 4 before version 9.19 allows server passwords to be exposed to other users due to improper handling of environment variables. The server manager wrote passwords into pgAdmin's process environment variables (PGPASSWORD), which are shared across user requests and inherited by background processes. This flaw enables one user to connect using another user's saved password. The issue is fixed by isolating the password environment to only the specific process that requires it.