DA
Vendor
DALIBO
25
CVEs
0
On KEV
12
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110183 New | PA PostgreSQL Anonymizer DALIBO | 4.3 | Oct 28 | PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking |
| CVE-2026-110182 New | PA PostgreSQL Anonymizer DALIBO | 4.3 | Oct 28 | PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data |
| CVE-2026-110181 New | PA PostgreSQL Anonymizer DALIBO | 6.5 | Oct 28 | PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data |
| CVE-2026-105620 New | PA PostgreSQL Anonymizer DALIBO | 6.5 | Oct 28 | PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query |
| CVE-2026-105619 New | PA PostgreSQL Anonymizer DALIBO | 4.8 | Oct 28 | PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views |
| CVE-2026-105618 New | PA PostgreSQL Anonymizer DALIBO | 5.7 | Oct 28 | PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent |
| CVE-2026-105617 New | PA PostgreSQL Anonymizer DALIBO | 6.5 | Oct 28 | PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule |
| CVE-2026-105616 New | PA PostgreSQL Anonymizer DALIBO | 5.7 | Oct 28 | PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting |
| CVE-2026-105615 New | PA PostgreSQL Anonymizer DALIBO | 3.5 | Oct 28 | PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats |
| CVE-2026-105614 New | PA PostgreSQL Anonymizer DALIBO | 4.7 | Oct 28 | PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur() |
| CVE-2026-105613 New | PA PostgreSQL Anonymizer DALIBO | 4.7 | Oct 28 | PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions |
| CVE-2026-105612 New | PA PostgreSQL Anonymizer DALIBO | 3.5 | Oct 28 | PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles |
| CVE-2026-97469 | PA PostgreSQL Anonymizer DALIBO | 4.3 | Sep 25 | PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink |
| CVE-2026-83534 | PA PostgreSQL Anonymizer DALIBO | 6.4 | Sep 6 | PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel() |
| CVE-2026-19634 | PA PostgreSQL Anonymizer DALIBO | 6.4 | Sep 6 | PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON |
| CVE-2026-19633 | PA PostgreSQL Anonymizer DALIBO | 8.8 | Sep 6 | PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries |
| CVE-2026-13455 | PA PostgreSQL Anonymizer DALIBO | 4.3 | Jun 30 | PostgreSQL Anonymizer: Unrestricted function can leak the secret salt |
| CVE-2026-11945 | PA PostgreSQL Anonymizer DALIBO | 7.5 | Jun 11 | PostgreSQL Anonymizer: SQL injection in the rules import functions |
| CVE-2026-9617 | PA PostgreSQL Anonymizer DALIBO | 8.8 | May 27 | PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function |
| CVE-2026-2361 | PA PostgreSQL Anonymizer DALIBO | 8.0 | Feb 11 | Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges |
| CVE-2026-2360 | PA PostgreSQL Anonymizer DALIBO | 8.0 | Feb 11 | Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14 |
| CVE-2025-5690 | PA PostgreSQL Anonymizer DALIBO | 6.5 | Jun 4 | Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data |
| CVE-2024-2339 | AN Anonymizer Dalibo | 8.8 | Mar 8 | PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser |
| CVE-2024-2338 | AN Anonymizer Dalibo | 7.5 | Mar 8 | PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled |