agentprime: dalibo-postgresql-anonymizerEvery new CVE for dalibo-postgresql-anonymizer.https://agentprime.io/CVE-2026-110183: PostgreSQL Anonymizer: statistics can expose some of the original data after statistic maskinghttps://agentprime.io/advisories/CVE-2026-110183/https://agentprime.io/advisories/CVE-2026-110183/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:53 GMTCVECVE-2026-110182: PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole datahttps://agentprime.io/advisories/CVE-2026-110182/https://agentprime.io/advisories/CVE-2026-110182/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:53 GMTCVECVE-2026-110181: PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized datahttps://agentprime.io/advisories/CVE-2026-110181/https://agentprime.io/advisories/CVE-2026-110181/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:52 GMTCVECVE-2026-105620: PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-queryhttps://agentprime.io/advisories/CVE-2026-105620/https://agentprime.io/advisories/CVE-2026-105620/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:52 GMTCVECVE-2026-105619: PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker viewshttps://agentprime.io/advisories/CVE-2026-105619/https://agentprime.io/advisories/CVE-2026-105619/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:49 GMTCVECVE-2026-105618: PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parenthttps://agentprime.io/advisories/CVE-2026-105618/https://agentprime.io/advisories/CVE-2026-105618/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:49 GMTCVECVE-2026-105617: PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rulehttps://agentprime.io/advisories/CVE-2026-105617/https://agentprime.io/advisories/CVE-2026-105617/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:48 GMTCVECVE-2026-105616: PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_settinghttps://agentprime.io/advisories/CVE-2026-105616/https://agentprime.io/advisories/CVE-2026-105616/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:47 GMTCVECVE-2026-105615: PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_statshttps://agentprime.io/advisories/CVE-2026-105615/https://agentprime.io/advisories/CVE-2026-105615/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:46 GMTCVECVE-2026-105614: PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()https://agentprime.io/advisories/CVE-2026-105614/https://agentprime.io/advisories/CVE-2026-105614/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:45 GMTCVECVE-2026-105613: PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functionshttps://agentprime.io/advisories/CVE-2026-105613/https://agentprime.io/advisories/CVE-2026-105613/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:45 GMTCVECVE-2026-105612: PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roleshttps://agentprime.io/advisories/CVE-2026-105612/https://agentprime.io/advisories/CVE-2026-105612/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 17:31:44 GMTCVECVE-2026-97469: PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLinkhttps://agentprime.io/advisories/CVE-2026-97469/https://agentprime.io/advisories/CVE-2026-97469/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 15:40:45 GMTCVECVE-2026-83534: PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()https://agentprime.io/advisories/CVE-2026-83534/https://agentprime.io/advisories/CVE-2026-83534/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 15:25:41 GMTCVECVE-2026-19634: PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSONhttps://agentprime.io/advisories/CVE-2026-19634/https://agentprime.io/advisories/CVE-2026-19634/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 15:25:36 GMTCVECVE-2026-19633: PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subquerieshttps://agentprime.io/advisories/CVE-2026-19633/https://agentprime.io/advisories/CVE-2026-19633/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 06 Sep 2026 15:25:32 GMTCVECVE-2026-13455: PostgreSQL Anonymizer: Unrestricted function can leak the secret salthttps://agentprime.io/advisories/CVE-2026-13455/https://agentprime.io/advisories/CVE-2026-13455/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Jun 2026 15:19:57 GMTCVECVE-2026-11945: PostgreSQL Anonymizer: SQL injection in the rules import functionshttps://agentprime.io/advisories/CVE-2026-11945/https://agentprime.io/advisories/CVE-2026-11945/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 15:53:24 GMTCVECVE-2026-9617: PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() functionhttps://agentprime.io/advisories/CVE-2026-9617/https://agentprime.io/advisories/CVE-2026-9617/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 27 May 2026 13:55:10 GMTCVECVE-2026-2361: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privilegeshttps://agentprime.io/advisories/CVE-2026-2361/https://agentprime.io/advisories/CVE-2026-2361/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 17:48:03 GMTCVECVE-2026-2360: Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14https://agentprime.io/advisories/CVE-2026-2360/https://agentprime.io/advisories/CVE-2026-2360/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Feb 2026 17:47:55 GMTCVECVE-2025-5690: Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic datahttps://agentprime.io/advisories/CVE-2025-5690/https://agentprime.io/advisories/CVE-2025-5690/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 21:34:47 GMTCVECVE-2024-2339: Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rulehttps://agentprime.io/advisories/CVE-2024-2339/https://agentprime.io/advisories/CVE-2024-2339/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 20:07:14 GMTCVECVE-2024-2338: SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rulehttps://agentprime.io/advisories/CVE-2024-2338/https://agentprime.io/advisories/CVE-2024-2338/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 Mar 2024 20:07:00 GMTCVE