Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/phpmyadmin/phpmyadmin@4.9.0%2B1
purl pkg:composer/phpmyadmin/phpmyadmin@4.9.0%2B1
Tags Ghost
Next non-vulnerable version 4.9.11
Latest non-vulnerable version 5.2.2
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zyzp-aqd8-e3a9
Aliases:
CVE-2019-12922
GHSA-4c9q-64gq-xhx4
phpMyAdmin Cross-Site Request Forgery (CSRF) A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.
4.9.1
Affected by 12 other vulnerabilities.
5.0.0
Affected by 11 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:59.697832+00:00 GHSA Importer Fixing VCID-jma9-9uhu-xuc3 https://github.com/advisories/GHSA-x37v-98f9-mj32 38.1.0
2026-04-02T12:36:02.590646+00:00 GitLab Importer Affected by VCID-zyzp-aqd8-e3a9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-12922.yml 38.0.0
2026-04-01T16:02:20.446947+00:00 GHSA Importer Affected by VCID-zyzp-aqd8-e3a9 https://github.com/advisories/GHSA-4c9q-64gq-xhx4 38.0.0
2026-04-01T13:09:47.003768+00:00 GithubOSV Importer Fixing VCID-jma9-9uhu-xuc3 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-x37v-98f9-mj32/GHSA-x37v-98f9-mj32.json 38.0.0
2026-04-01T12:48:30.737519+00:00 GitLab Importer Fixing VCID-jma9-9uhu-xuc3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/phpmyadmin/phpmyadmin/CVE-2019-11768.yml 38.0.0