← All credits

The PostgreSQL Anonymizer project thanks user Ilya Staroverov for reporting this problem.

10 vulnerability records and advisories credit this contributor.

CVE-2026-110183

PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking

CVE-2026-110182

PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data

CVE-2026-110181

PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data

CVE-2026-105620

PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query

CVE-2026-105619

PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

CVE-2026-105618

PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent

CVE-2026-105617

PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule

CVE-2026-105616

PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting

CVE-2026-105615

PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats

CVE-2026-105612

PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles