CVE-2024-9014: Pgadmin Oauth2 Config Leak In Templatecve-2024-9014-pgadmin-oauth2-config-leak-in-template
A server-side OAuth2 configuration (`config.OAUTH2_CONFIG`) is assigned directly into a Jinja template render context (e.g., `page_props`) without filtering out secret fields. `OAUTH2_CONFIG` entries contain `OAUTH2_CLIENT_ID` and `OAUTH2_CLIENT_SECRET`, which will be embedded verbatim in the rendered HTML/JS of an unauthenticated page and disclosed to any v
