Vulnerabilities

TI-2026-08447 CVE-2026-9617 · GHSA-2qfw-46cx-cgv6

PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function

MEDIUM 40

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0025 Published 2026-05-27 Fixed in 3.1.0 CWE-89

TI-2024-02174 CVE-2024-2339 · GHSA-fvc5-hrmq-8hx4

Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

MEDIUM 41

PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00552 Published 2024-03-08 Fixed in 1.3.0 CWE-20

TI-2024-02173 CVE-2024-2338 · GHSA-vc6j-mx82-hrhh

SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

LOW 37

PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.00461 Published 2024-03-08 Fixed in 1.3.0 CWE-89

Vulnerabilities

Filters

PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function

Improper Input Validation in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule

SQL Injection in PostgreSQL Anonymizer 1.2 allows table owner to gain superuser privileges via masking rule