Cpe:2.3:a:pgweb_project:pgweb:*:*:*:*:*:*:*:*

An authorization bypass vulnerability in pgweb versions up to 0.17.0 allows unauthenticated attackers to supply arbitrary connection strings via the /api/connect endpoint.