SecAlerts
P

PostgreSQL Anonymizer

Security Risk Profile

35
/100
low

Security Risk Score

Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from May 27, 2026 to present

10
Total CVEs
1
Critical+High
0
Exploited
1
Unpatched

Threat Assessment

Avg CVSS
6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
35/100
low
📈 7 in Last 30 Days

Severity Distribution

Critical
0
High
1
Medium
8
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
1

Age Distribution

Common Weaknesses (CWE)

1
Infoleak
2
2
SQL Injection
2

Most Affected Products

1. PostgreSQL Anonymizer PostgreSQL Anonymizer10
2. Dalibo Anonymizer Postgresql1

Recent Vulnerabilities

See more →
CVE-2026-105620
CVSS 6.5medium

PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query

Oct 28, 2026🔧 No Patch
CVE-2026-110181
CVSS 6.5medium

PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data

Oct 28, 2026🔧 No Patch
CVE-2026-105617
CVSS 6.5medium

PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule

Oct 28, 2026🔧 No Patch
CVE-2026-105616
CVSS 5.7medium

PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting

Oct 28, 2026🔧 No Patch
CVE-2026-105615
CVSS 3.5low

PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

Oct 28, 2026🔧 No Patch
CVE-2026-105613
CVSS 4.7medium

PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions

Oct 28, 2026🔧 No Patch
CVE-2026-105614
CVSS 4.7medium

PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()

Oct 28, 2026🔧 No Patch
CVE-2026-83534
CVSS 6.4medium

PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()

Sep 6, 2026🔧 No Patch
CVE-2026-19634
CVSS 6.4medium

PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON

Sep 6, 2026🔧 No Patch
CVE-2026-9617
CVSS 8.8EPSS 0%high

PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function

May 27, 2026🔧 No Patch

Monitor PostgreSQL Anonymizer in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

PostgreSQL Anonymizer Security Vulnerabilities & Risk Score | 10 CVEs | SecAlerts - SecAlerts