DALIBO PostgreSQL Anonymizer güvenlik açıkları
DALIBO
- Toplam açık
- 12
- Kritik
- 0
- Aktif istismar
- 0
- Yaması çıkan
- 12
- Son açık
- 1 sa önce
Önem dağılımı
- Kritik 0
- Yüksek 0
- Orta 10
- Düşük 2
Son açıklar
12 açık
- 4,3Orta CVE-2026-110183Yama var PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking
- 4,3Orta CVE-2026-110182Yama var PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data
- 6,5Orta CVE-2026-110181Yama var PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data
- 6,5Orta CVE-2026-105620Yama var PostgreSQL Anonymizer: A masked role reads the authentic data of masked tables through a masking rule with a sub-query
- 4,8Orta CVE-2026-105619Yama var PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views
- 5,7Orta CVE-2026-105618Yama var PostgreSQL Anonymizer: Masked partitions and child tables are not masked when they are queried through their parent
- 5,7Orta CVE-2026-105617Yama var PostgreSQL Anonymizer: Cached plans bypass transparent dynamic masking after a role change or a new masking rule
- 5,7Orta CVE-2026-105616Yama var PostgreSQL Anonymizer: The secret salt and shift of anon are readable by any role in pg_roles or pg_db_role_setting
- 3,5Düşük CVE-2026-105615Yama var PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats
- 4,7Orta CVE-2026-105614Yama var PostgreSQL Anonymizer: Unbounded image-decode memory allocation (DoS) in anon.image_blur()
- 4,7Orta CVE-2026-105613Yama var PostgreSQL Anonymizer: Unbounded memory allocation (DoS) in range-based dummy functions
- 3,5Düşük CVE-2026-105612Yama var PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles