What’s Vulnerable › Products
DALIBO PostgreSQL Anonymizer vulnerabilities
10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.
Check whether your DALIBO PostgreSQL Anonymizer version is affected
Latest DALIBO PostgreSQL Anonymizer vulnerabilities
- CVE-2026-97469 — PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink (CVSS 4.3)
- CVE-2026-83534 — PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() (CVSS 6.4)
- CVE-2026-19634 — PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON (CVSS 6.4)
- CVE-2026-19633 — PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries (CVSS 8.8)
- CVE-2026-9617 — PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function (CVSS 8.8)
- CVE-2026-2361 — Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges (CVSS 8.0)
- CVE-2026-2360 — Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 (CVSS 8.0)
- CVE-2025-5690 — Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data (CVSS 6.5)
- CVE-2024-2339 — Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule (CVSS 8.8)
- CVE-2024-2338 — SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule (CVSS 7.5)