pgAdmin <= 9.1 is affected by a security vulnerability with Cross-Site Scripting(XSS). If attackers execute any arbitrary HTML/JavaScript in a user's browser through query result rendering, then HTML/JavaScript runs on the browser.
{ "versions": [ { "introduced": "0" }, { "last_affected": "9.1" } ] }
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-2946.json"