Data Exposure Vulnerability in PostgreSQL Anonymizer by Dalibo
CVE-2026-105619

4.8MEDIUM

Key Information:

Vendor

Dalibo

Status
Postgresql Anonymizer
Vendor
CVE Published:
28 October 2026

What is CVE-2026-105619?

A vulnerability in PostgreSQL Anonymizer allows exposure of sensitive data accessed through a security_invoker view. This issue affects versions prior to 3.3.0, where the anonymization process does not adequately mask the data, potentially compromising user confidentiality. It is crucial for users of outdated versions to upgrade to ensure their data remains secure.

Affected Version(s)

PostgreSQL Anonymizer 1 < 3.3.0

References

https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/697

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The PostgreSQL Anonymizer project thanks user Ilya Staroverov for reporting this problem.
.