A critical RCE flaw (CVSS 9.1) in pgAdmin bypasses security via a UTF-8 BOM parsing mismatch. It allows attackers to execute root commands during a database restore operation. Update immediately.
security bypass
A low-severity flaw in Apache Tomcat (CVE-2025-46701) allows security constraint bypass via crafted URLs on case-insensitive file systems. Update now!