DALIBO PostgreSQL Anonymizer vulnerabilities

CVEs per yearBy the year they were published

1. 20242
2. 20251
3. 202621

Newest CVEs

• CVE-2026-110183

  PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

  DALIBO · PostgreSQL Anonymizer

  Medium4.3
• CVE-2026-110182

  PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data

  DALIBO · PostgreSQL Anonymizer

  Medium4.3
• CVE-2026-110181

  PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data

  DALIBO · PostgreSQL Anonymizer

  Medium6.5
• CVE-2026-105620

  PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query

  DALIBO · PostgreSQL Anonymizer

  Medium6.5
• CVE-2026-105619

  PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

  DALIBO · PostgreSQL Anonymizer

  Medium4.8
• CVE-2026-105618

  PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent

  DALIBO · PostgreSQL Anonymizer

  Medium5.7
• CVE-2026-105617

  PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule

  DALIBO · PostgreSQL Anonymizer

  Medium5.7
• CVE-2026-105616

  PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting

  DALIBO · PostgreSQL Anonymizer

  Medium5.7
• CVE-2026-105615

  PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

  DALIBO · PostgreSQL Anonymizer

  Low3.5
• CVE-2026-105614

  PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()

  DALIBO · PostgreSQL Anonymizer

  Medium4.7