Phiên bản pgAdmin 4 v9.16 vừa ra mắt với 64 bản sửa lỗi và tính năng mới, trong đó có 7 lỗ hổng bảo mật nghiêm trọng (CVE-2026-12044 đến CVE-2026-12050) như SQL injection, bypass giao dịch read-only, XSS lưu trữ, và lỗ hổng chuyển hướng mở. Ngoài ra, phiên bản này bổ sung giao diện mã màu cho server, hỗ trợ đóng tab bằng click giữa, cấu hình bảo mật Helm chart, và hỗ trợ TOAST tuple trong Materialized View. pgAgent đã bị loại bỏ và sẽ bị gỡ bỏ trong vòng 6 tháng tới.
AI summaries can be wrong. Read the original before relying on anything important.
Why read it: Lập trình viên phát triển ứng dụng sử dụng PostgreSQL nên đọc bài này để cập nhật về các lỗ hổng bảo mật mới trong pgAdmin 4 (v9.16), đặc biệt là các vấn đề như SQL injection, XSS và RCE có thể ảnh hưởng đến tính bảo mật của hệ thống quản lý cơ sở dữ liệu mà họ sử dụng.
Answer 3 short questions to earn reward points for this article. Only do it if you want the points.
3 questions · under a minute · optional
Source: https://www.postgresql.org/about/news/pgadmin-4-v916-released-3324. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
Read the news here, practice coding, follow structured courses and train for IELTS on our sibling products — all connected through one 8 Sync account.
The ecosystem home: product overviews, blog and full pricing.
ExploreLearn along a clear roadmap: videos, auto-graded quizzes, certificates and mentors who ship for a living.
View the roadmap1,000 DSA problems in Vietnamese, auto-graded across 7 languages — many FREE, right in your browser.
Practice for freeAI grading for all four IELTS skills with detailed rubric feedback.
Try it freeA 22 MB AI IDE for Vietnamese devs.
Download freeOrganizational memory for AI agents.
ExploreAI that staffs your Fanpage and qualifies leads for you.
Try itUltorg is an efficient, spreadsheet-like user interface for relational databases. Query and edit data across tables and relationships, without SQL.
Agents write faster than humans can review. Typed graphs check every write, checked queries validate every question, and branches keep the human where true is decided.
Event-driven systems only agree eventually. Here’s how we check they actually got there: deadlines, data ownership, and a reconciliation job that walks the floor.
OccupySaaS is a protest movement in code: laid-off developers building clean-room, open-source, drop-in replacements for the SaaS giants. First up: ZeroAuthy (Auth0) and SalesCompel (Salesforce).
json vs jsonb in PostgreSQL 17 and 18, measured on six document shapes: when jsonb is 23% smaller or 41% larger, read speed, GIN, and what it changes.
An API can save an order and crash before publishing the message that tells other services about it.
Postgres 18’s new file_copy_method = clone setting lets you give every git worktree its own copy of your database in seconds, without eating up your disk.
If you have certain lines of code that repeat over and over again in a project, there's a pretty standard solution for it: using a function. But what about when you have the same project file setup th
Loading comments…