Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: DALIBO Component: Postgresql Anonymizer Clear all filters
TI-2026-11385 CVE-2026-13455 · GHSA-8ch8-93q8-mhm3

PostgreSQL Anonymizer: Unrestricted function can leak the secret salt

Priority LOW 19

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00188 Published 2026-06-30 Fixed in 3.1.2 CWE-328
TI-2026-10302 CVE-2026-11945 · GHSA-g5vm-7gwv-45rj

PostgreSQL Anonymizer: SQL injection in the rules import functions

Priority LOW 34

PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00247 Published 2026-06-11 Fixed in 3.1.1 CWE-89