Fixed false negative CVE for pgAdmin 4.

[getvictor]

Related issue: Resolves #37957

Checklist for submitter

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.

Testing

• Added/updated automated tests
• QA'd all new/changed functionality manually

Summary by CodeRabbit

Bug Fixes

• Enhanced pgAdmin 4 vulnerability detection – Improved the system's ability to identify pgAdmin 4-related vulnerabilities across multiple platforms and installation configurations, addressing previously undetected security issues.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[getvictor]

This is to make sure we match the CVE to our CPEs.

[getvictor]

@coderabbitai full review

[coderabbitai]

✅ Actions performed

Full review triggered.

[coderabbitai]

Walkthrough

This pull request adds vulnerability detection support for pgAdmin 4 by introducing a CPE translation entry and expanding CPE alias generation logic to correctly match NVD CVE records with pgAdmin installations, resolving a false negative for CVE-2025-13780.

Changes

Cohort / File(s)	Summary
Fix Documentation changes/37957-pgadmin-vulnerability	Adds changelog entry documenting resolution of false negative CVE detection for pgAdmin 4
CVE Configuration server/vulnerabilities/nvd/cpe_translations.json	Introduces new CPE translation mapping for pgAdmin 4 with case-insensitive regex matching and vendor/product filtering
Core Logic server/vulnerabilities/nvd/cve.go	Extends expandCPEAliases function to generate three additional CPE aliases for pgAdmin products (pgadmin, pgadmin_4, pgadmin4) with TargetSW set to "postgresql" to match NVD criteria
Test Coverage server/vulnerabilities/nvd/cve_test.go	Adds comprehensive test fixtures and alias expansion cases for pgAdmin across macOS and Windows platforms with multiple product variants

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Suggested reviewers

• mostlikelee
• ksykulev

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 50.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title 'Fixed false negative CVE for pgAdmin 4' clearly summarizes the main change: resolving a CVE detection issue for pgAdmin 4, which aligns with the PR objectives and linked issue #37957.
Description check	✅ Passed	The PR description includes the related issue link (#37957), marks relevant checklist items as complete (changes file, automated tests, manual QA), though it omits many non-applicable template sections which is acceptable per guidelines.
Linked Issues check	✅ Passed	The code changes address CVE-2025-13780 detection for pgAdmin 4 by adding CPE alias generation and translation entries to expand matching coverage, directly fulfilling the linked issue #37957 requirement.
Out of Scope Changes check	✅ Passed	All code changes (CPE translations, alias generation logic, and tests) are directly scoped to resolving the pgAdmin CVE detection issue; no out-of-scope modifications detected.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

• 📝 Generate docstrings

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch victor/37957-pgadmin-vuln

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.11%. Comparing base (4bbd4ee) to head (050bcf9).
⚠️ Report is 63 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #38813      +/-   ##
==========================================
+ Coverage   66.07%   66.11%   +0.03%     
==========================================
  Files        2415     2420       +5     
  Lines      192800   193766     +966     
  Branches     8536     8536              
==========================================
+ Hits       127399   128109     +710     
- Misses      53832    54020     +188     
- Partials    11569    11637      +68     

Flag	Coverage Δ
backend	67.95% <100.00%> (+0.03%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.