Skip to content

Adminer

v5.4.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo Relational Databases
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

database mssql mysql php postgresql sqlite

Summary

AI summary

Avoid denial-of-service via version check vulnerability.

Full changelog
  • Avoid denial-of-service via version check (https://github.com/vrana/adminer/security/advisories/GHSA-q4f2-39gr-45jh, regression from 4.6.2)
  • Pretty print JSON in edit
  • Support multiline generated values in alter table
  • Link //domain.tld values
  • Improve print of nested tables
  • Hide sort links on unsortable columns
  • Display uneditable fields in edit form
  • Shorten all but numeric and date types in select
  • Fix escaping spaces in cookie value (bug #1208)
  • Don't quote comma in TSV export (bug #1238)
  • MariaDB: Don't display checks with the same name from another table (bug #1135)
  • PostgreSQL: Offer foreign keys in create table
  • PostgreSQL: Add missing parentheses to CHECK export
  • PostgreSQL: Allow creating NOT DEFERRABLE foreign keys
  • PostgreSQL: Remove duplicate DEFERRABLE in foreign key export
  • PostgreSQL: Add schema to sequence and view export
  • PostgreSQL: Fix definition of complex generated columns
  • PostgreSQL: Mark unique partial indexes as unique (bug #1172)
  • PostgreSQL: Fix namespace in inheritance links (bug #1221)
  • non-PostgreSQL: Display NOT NULL checks (bug #1237)
  • ClickHouse: Fix offset (bug #1188)
  • ClickHouse: Fix list of tables (bug #1176)
  • Plugins: Methods showVariables() and showStatus() (bug #1157)
  • Plugins: Allow to be in any namespace
  • New plugin: IGDB driver

Security Fixes

  • GHSA-q4f2-39gr-45jh — Avoid denial-of-service via version check (regression from 4.6.2)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Adminer

Get notified when new releases ship.

Sign up free

About Adminer

Database management in a single PHP file. Available for MySQL, MariaDB, PostgreSQL, SQLite, MS SQL, Oracle, Elasticsearch, MongoDB and others.

All releases →

Beta — feedback welcome: [email protected]