DDALIBO

Products

Exploited and recent CVEs

• CVE-2026-110183 Medium 4.3 PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking 0.2%
• CVE-2026-110182 Medium 4.3 PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data 0.2%
• CVE-2026-110181 Medium 6.5 PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data 0.3%
• CVE-2026-105620 Medium 6.5 PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query 0.2%
• CVE-2026-105619 Medium 4.8 PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views 0.2%
• CVE-2026-105618 Medium 5.7 PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent 0.2%
• CVE-2026-105617 Medium 5.7 PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule 0.2%
• CVE-2026-105616 Medium 5.7 PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting 0.2%
• CVE-2026-105615 Low 3.5 PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats 0.1%
• CVE-2026-105614 Medium 4.7 PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() 0.2%
• CVE-2026-105613 Medium 4.7 PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions 0.2%
• CVE-2026-105612 Low 3.5 PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles 0.2%
• CVE-2026-97469 Medium 4.3 PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink 0.1%
• CVE-2026-83534 Medium 6.4 PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() 0.3%
• CVE-2026-19634 Medium 6.4 PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON 0.3%
• CVE-2026-19633 High 8.8 PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries 0.7%
• CVE-2026-13455 Medium 4.3 PostgreSQL Anonymizer: Unrestricted function can leak the secret salt 0.2%
• CVE-2026-11945 Medium 6.4 PostgreSQL Anonymizer: SQL injection in the rules import functions 0.2%
• CVE-2026-9617 Medium 6.8 PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function 0.2%
• CVE-2026-2361 High 8.0 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges 0.3%
• CVE-2026-2360 High 8.0 Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 0.5%
• CVE-2025-5690 Medium 6.5 Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data 0.4%
• CVE-2024-2339 High 8.0 Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule 0.6%
• CVE-2024-2338 High 8.0 SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule 0.5%