[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2024:3771-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-01T16:22:42.503Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":34,"duplicates":35,"related":36,"reserved_at":9,"published_at":47,"modified_at":48,"state":9,"summary":49,"references_raw":51,"kevs":141,"epss":9,"epss_history":142,"metrics":143,"affected":144},"SUSE-SU-2024:3771-1","Security update for pgadmin4\n\nThis update for pgadmin4 fixes the following issues:\n\n- CVE-2024-38355: Fixed socket.io: unhandled 'error' event (bsc#1226967)\n- CVE-2024-38998: Fixed requirejs: prototype pollution via function config (bsc#1227248)\n- CVE-2024-38999: Fixed requirejs: prototype pollution via function s.contexts._.configure (bsc#1227252)\n- CVE-2024-39338: Fixed axios: server-side request forgery due to requests for path relative URLs being processed as protocol relative URLs in axios (bsc#1229423)\n- CVE-2024-4067: Fixed micromatch: vulnerable to Regular Expression Denial of Service (ReDoS) (bsc#1224366)\n- CVE-2024-4068: Fixed braces: fails to limit the number of characters it can handle, which could lead to Memory Exhaustion (bsc#1224295)\n- CVE-2024-43788: Fixed webpack: DOM clobbering gadget in AutoPublicPathRuntimeModule could lead to XSS (bsc#1229861)\n- CVE-2024-48948: Fixed elliptic: ECDSA signature verification error due to leading zero may reject legitimate transactions in elliptic (bsc#1231684)\n- CVE-2024-48949: Fixed elliptic: Missing Validation in Elliptic's EDDSA Signature Verification (bsc#1231564)\n- CVE-2024-9014: Fixed OAuth2 issue that could lead to information leak (bsc#1230928)\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32],{"_key":15},"CVE-2024-38355",{"_key":17},"CVE-2024-38998",{"_key":19},"CVE-2024-38999",{"_key":21},"CVE-2024-39338",{"_key":23},"CVE-2024-4067",{"_key":25},"CVE-2024-4068",{"_key":27},"CVE-2024-43788",{"_key":29},"CVE-2024-48948",{"_key":31},"CVE-2024-48949",{"_key":33},"CVE-2024-9014",[],[],[37,38,39,40,41,42,43,44,45,46],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},"2024-10-29T12:55:34Z","2026-02-04T02:25:55.097314Z",{"cisa_kev":50,"cisa_ransomware":50,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[52,59,64,68,72,76,80,84,88,92,96,100,105,109,113,117,121,125,129,133,137],{"url":53,"sources":54,"tags":57},"https://www.suse.com/support/update/announcement/2024/suse-su-20243771-1/",[55,56],"osv_suse","osv_opensuse",[58],"Advisory",{"url":60,"sources":61,"tags":62},"https://bugzilla.suse.com/1224295",[55,56],[63],"REPORT",{"url":65,"sources":66,"tags":67},"https://bugzilla.suse.com/1224366",[55,56],[63],{"url":69,"sources":70,"tags":71},"https://bugzilla.suse.com/1226967",[55,56],[63],{"url":73,"sources":74,"tags":75},"https://bugzilla.suse.com/1227248",[55,56],[63],{"url":77,"sources":78,"tags":79},"https://bugzilla.suse.com/1227252",[55,56],[63],{"url":81,"sources":82,"tags":83},"https://bugzilla.suse.com/1229423",[55,56],[63],{"url":85,"sources":86,"tags":87},"https://bugzilla.suse.com/1229861",[55,56],[63],{"url":89,"sources":90,"tags":91},"https://bugzilla.suse.com/1230928",[55,56],[63],{"url":93,"sources":94,"tags":95},"https://bugzilla.suse.com/1231564",[55,56],[63],{"url":97,"sources":98,"tags":99},"https://bugzilla.suse.com/1231684",[55,56],[63],{"url":101,"sources":102,"tags":103},"https://www.suse.com/security/cve/CVE-2024-38355",[55,56],[104],"WEB",{"url":106,"sources":107,"tags":108},"https://www.suse.com/security/cve/CVE-2024-38998",[55,56],[104],{"url":110,"sources":111,"tags":112},"https://www.suse.com/security/cve/CVE-2024-38999",[55,56],[104],{"url":114,"sources":115,"tags":116},"https://www.suse.com/security/cve/CVE-2024-39338",[55,56],[104],{"url":118,"sources":119,"tags":120},"https://www.suse.com/security/cve/CVE-2024-4067",[55,56],[104],{"url":122,"sources":123,"tags":124},"https://www.suse.com/security/cve/CVE-2024-4068",[55,56],[104],{"url":126,"sources":127,"tags":128},"https://www.suse.com/security/cve/CVE-2024-43788",[55,56],[104],{"url":130,"sources":131,"tags":132},"https://www.suse.com/security/cve/CVE-2024-48948",[55,56],[104],{"url":134,"sources":135,"tags":136},"https://www.suse.com/security/cve/CVE-2024-48949",[55,56],[104],{"url":138,"sources":139,"tags":140},"https://www.suse.com/security/cve/CVE-2024-9014",[55,56],[104],[],[],[],[145,158],{"ecosystem":146,"name":147,"vendor":148,"product":149,"cpe_part":9,"purl_type":150,"purl_namespace":148,"purl_name":149,"source":9,"versions":151},"openSUSE","pgadmin4","opensuse","pgadmin4&distro=openSUSE Leap 15.6","rpm",[152],{"version":153,"is_range":154,"range_type":155,"version_start":9,"version_start_type":9,"version_end":156,"version_end_type":157,"fixed_in":9},"lt8_5_150600_3_6_1",true,"ecosystem","8.5-150600.3.6.1","excluding",{"ecosystem":159,"name":147,"vendor":160,"product":161,"cpe_part":9,"purl_type":150,"purl_namespace":160,"purl_name":161,"source":9,"versions":162},"SUSE Linux Enterprise","suse","pgadmin4&distro=SUSE Linux Enterprise Module for Python 3 15 SP6",[163],{"version":153,"is_range":154,"range_type":155,"version_start":9,"version_start_type":9,"version_end":156,"version_end_type":157,"fixed_in":9}]