Back Linuxsecurity

Fedora 42 pgAdmin 4 CVE-2025

Linuxsecurity •LinuxSecurity Advisories • February 6, 2026

pgAdmin is the most popular and feature rich Open Source administration and development platform for PostgreSQL, the most advanced Open Source database in the world. Update Information : Regenerate vendor tarball. Fixes CVE-2025-13465.

pgAdmin is the most popular and feature rich Open Source administration and development

platform for PostgreSQL, the most advanced Open Source database in the world.

Regenerate vendor tarball. Fixes CVE-2025-13465.

* Tue Jan 27 2026 Sandro Mani - 9.11-3 - Refresh bundle, fixes CVE-2025-13465

[ 1 ] Bug #2432986 - CVE-2025-13465 pgadmin4: prototype pollution in _.unset and _.omit functions [fedora-42] [ 2 ] Bug #2433036 - CVE-2025-13465 pgadmin4: prototype pollution in _.unset and _.omit functions [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-3062e10d87' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 43 pgAdmin4 Fixes Moderate Prototype Pollution Vulnerability CVE-2025-13465 Fedora 43 has released a fix for a moderate prototype pollution vulnerability identified as CVE-2025-13465 affecting pgAdmin4, a popular open-source administration tool for PostgreSQL. The vulnerability was published on January 21, 2026, and the update includes regenerating the vendor tarball to address the issue. 6 sources 57

Extracted Entities

CVEs (1)

CVE-2025-13465

Vulnerabilities (1)

Prototype Pollution