Repository Issue Activity (beta)

#10429 Blocker: Install in disk C, disk D, delete old local files still error

#10430 pgAdmin 4 9.18

#10437 exception: access violation writing 0x0000000000000000

#10438 Proposal: Starting official Russian documentation (translation) for pgAdmin 4

#6776 Run two select statements at the same time

#10428 Upgrade to 9.18 on Windows 11 Pro can't connect to Aurora PostgreSQL

#10382 AI Configuration - auth header support?

#10407 Desktop package builds resolve runtime dependencies without a lockfile

#10435 Cannot backup using pg_dump.exe in version 9.18

#10128 Update of saved passwords fails in Query Tool on 9-16

#10384 Argument and connection-string injection via the database field in the Backup tool (CVE-2026-86864)

#10383 Authentication bypass via a client-controlled identity header in Webserver authentication mode (CVE-2026-86863)

#10385 File Manager save_file writes through a symbolic link planted after the containment check (CVE-2026-86861)

#10388 Connection-string injection via the database field in the Restore and Maintenance tools (CVE-2026-86862)

#10366 From version 9.16 and 9.17: When right click on one table > scripts > CREATE script, DELETE script, INSERT script, SELECT script or UPDATE script >failed to fecth data

#10426 Query Tool: Modified mark (*) appears after the filename in the tab instead of before it

#10425 Harden the default Content-Security-Policy: use a per-request nonce instead of 'unsafe-inline' / 'unsafe-eval'

#10424 Reset Layout drops Query Tool tabs on the next refresh even with "Save the application state" enabled

#10213 OS command injection in Import/Export Data via backslash-escape mismatch in the query guard (CVE-2026-17566)

#10422 Diff - identity Columns & Comments

#10421 Replace the pre-built pkg/mac/dmg.DS_Store with a layout generated at build time

#10420 LLM API requests followed HTTP redirects past the ALLOWED_LLM_API_URLS check

#10419 Server gives application/json response when Kerberos Auth fails

#10418 Dead `usr` query parameter passed to sqleditor.connect_server never reaches the backend

#10417 Feature request: Avoid creating a `~/.pgadmin` directory