Dalibo Anonymizer vulnerabilities

• dalibo postgresql anonymizer PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking CVE-2026-110183 4.3 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data CVE-2026-110182 4.3 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data CVE-2026-110181 6.5 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query CVE-2026-105620 6.5 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views CVE-2026-105619 4.8 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent CVE-2026-105618 5.7 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule CVE-2026-105617 5.7 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting CVE-2026-105616 5.7 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats CVE-2026-105615 3.5 LowOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() CVE-2026-105614 4.7 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions CVE-2026-105613 4.7 MediumOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles CVE-2026-105612 3.5 LowOctober 28, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink CVE-2026-97469 4.3 MediumSeptember 25, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() CVE-2026-83534 6.4 MediumSeptember 6, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON CVE-2026-19634 6.4 MediumSeptember 6, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries CVE-2026-19633 8.8 HighSeptember 6, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: Unrestricted function can leak the secret salt CVE-2026-13455 4.3 MediumJune 30, 2026
• dalibo postgresql anonymizer PostgreSQL Anonymizer: SQL injection in the rules import functions CVE-2026-11945 6.4 MediumJune 11, 2026
• dalibo anonymizer, postgresql anonymizer +1 more PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function CVE-2026-9617 6.8 MediumMay 27, 2026
• dalibo postgresql anonymizer Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges CVE-2026-2361 8.0 HighFebruary 11, 2026
• dalibo postgresql anonymizer Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 CVE-2026-2360 8.0 HighFebruary 11, 2026
• dalibo postgresql anonymizer Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data CVE-2025-5690 6.5 MediumJune 4, 2025
• dalibo anonymizer, postgresql anonymizer +1 more Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule CVE-2024-2339 8.0 HighMarch 8, 2024
• dalibo anonymizer, postgresql anonymizer +1 more SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule CVE-2024-2338 8.0 HighMarch 8, 2024