Product by DALIBO
Postgresql Anonymizer
24 known vulnerabilities in Postgresql Anonymizer (DALIBO), 0 of them actively exploited (CISA KEV).
Key figures
24
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-19633 | DALIBO PostgreSQL Anonymizer: SQL Injection | 8.8 | |
| High | CVE-2026-2360 | DALIBO PostgreSQL Anonymizer: Uncontrolled Search Path Element | 8.0 | |
| Medium | CVE-2026-110181 | PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data | 6.5 | |
| High | CVE-2026-9617 | PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function | 8.8 | |
| Medium | CVE-2026-105617 | DALIBO PostgreSQL Anonymizer: Exposure of Sensitive Information to an Unauthorized Actor | 6.5 | |
| Medium | CVE-2026-105620 | DALIBO PostgreSQL Anonymizer: Missing Authorization | 6.5 | |
| Medium | CVE-2026-83534 | PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() | 6.4 | |
| Medium | CVE-2026-19634 | DALIBO PostgreSQL Anonymizer: SQL Injection | 6.4 | |
| High | CVE-2024-2339 | DALIBO PostgreSQL Anonymizer: Improper Input Validation | 8.0 | |
| High | CVE-2026-2361 | DALIBO PostgreSQL Anonymizer: Uncontrolled Search Path Element | 8.0 | |
| Medium | CVE-2026-105616 | DALIBO PostgreSQL Anonymizer: Exposure of Sensitive Information to an Unauthorized Actor | 5.7 | |
| Medium | CVE-2026-105618 | DALIBO PostgreSQL Anonymizer: Missing Authorization | 5.7 | |
| High | CVE-2026-11945 | PostgreSQL Anonymizer: SQL injection in the rules import functions | 7.5 | |
| High | CVE-2024-2338 | DALIBO PostgreSQL Anonymizer: SQL Injection | 8.0 | |
| Medium | CVE-2026-105619 | PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views | 4.8 | |
| Medium | CVE-2026-105614 | PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() | 4.7 | |
| Medium | CVE-2026-105613 | PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions | 4.7 | |
| Medium | CVE-2026-110182 | PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data | 4.3 | |
| Medium | CVE-2026-110183 | PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking | 4.3 | |
| Medium | CVE-2026-97469 | PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink | 4.3 | |
| Medium | CVE-2025-5690 | Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data | 6.5 | |
| Low | CVE-2026-105612 | PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles | 3.5 | |
| Low | CVE-2026-105615 | PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats | 3.5 | |
| Medium | CVE-2026-13455 | PostgreSQL Anonymizer: Unrestricted function can leak the secret salt | 4.3 |