How many CVEs does DALIBO have?

DALIBO has 12 published CVE records since 2024, including 10 in the last two years.

How many DALIBO CVEs are in CISA KEV?

None of DALIBO's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which DALIBO products have the most CVEs?

The DALIBO products with the most published CVEs are PostgreSQL Anonymizer, anonymizer.

What are the most common weakness types in DALIBO CVEs?

DALIBO's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-328 (Use of Weak Hash), CWE-427 (Uncontrolled Search Path Element), CWE-20 (Improper Input Validation).

Are there public exploits for DALIBO vulnerabilities?

Yes — 3 of DALIBO's CVEs have a known public exploit.

What is the average severity of DALIBO CVEs?

The average CVSS base score across DALIBO's scored CVEs is 7.2.

RadicalNotion.AI

Log in Create an account

12 CVEs

DALIBO Vulnerabilities

Name: DALIBO vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for DALIBO.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.2

Avg CVSS

2024–2026

Overview

DALIBO has 12 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Security scorecard

A quick read on DALIBO's vulnerability posture, as a share of its 12 published CVEs.

Average CVSS: 7.2
Critical / high: 58%
Actively exploited (KEV): 0%
Public exploit available: 25%
Patch available: 100%

Severity and exploitation

How the CVSS severity of DALIBO's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High7

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of DALIBO's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of DALIBO's CVEs have a known public exploit available.

Most affected products

The DALIBO products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in DALIBO CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish DALIBO CVE records.

PostgreSQL12 CVEs

Disclosure activity by year

How many DALIBO CVEs were published each year.

2024

2

2025

1

2026

9

Latest DALIBO CVEs

The most recently disclosed vulnerabilities affecting DALIBO.

PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink
CWE-328
Medium · CVSS 4.3
EPSS 0.1%2026-09-25
PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()
CWE-250
Medium · CVSS 6.4
EPSS 0.2%2026-09-06
PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON
CWE-89
Medium · CVSS 6.4
EPSS 0.2%2026-09-06
PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries
CWE-89
High · CVSS 8.8
EPSS 0.4%2026-09-06
PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
CWE-328
Medium · CVSS 4.3
EPSS 0.2%2026-06-30
PostgreSQL Anonymizer: SQL injection in the rules import functions
CWE-89
High · CVSS 7.5
EPSS 0.2%2026-06-11
PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function
CWE-89
High · CVSS 8.8
EPSS 0.4%2026-05-27
Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges
CWE-427
High · CVSS 8.0
EPSS 0.3%2026-02-11
Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14
CWE-427
High · CVSS 8.0
EPSS 0.5%2026-02-11
Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data
CWE-200
Medium · CVSS 6.5
EPSS 0.3%2025-06-04
High vulnerability · 2024-03-08
CWE-20
High · CVSS 8.8
EPSS 0.6%2024-03-08
High vulnerability · 2024-03-08
CWE-89
High · CVSS 8.0
EPSS 0.5%2024-03-08

Get an alert for each new DALIBO CVE, with AI-written analysis and remediation steps.

Monitor DALIBO CVEs

Other vendors

CVE counts for other vendors.

microsoft41,739 CVEs linux25,260 CVEs Google17,495 CVEs Apple15,495 CVEs Oracle13,348 CVEs Debian10,233 CVEs IBM9,452 CVEs Red Hat8,581 CVEs

Browse all vendors

Frequently asked questions

Common questions about DALIBO vulnerabilities.

How many CVEs does DALIBO have?: DALIBO has 12 published CVE records since 2024, including 10 in the last two years.
How many DALIBO CVEs are in CISA KEV?: None of DALIBO's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which DALIBO products have the most CVEs?: The DALIBO products with the most published CVEs are PostgreSQL Anonymizer, anonymizer.
What are the most common weakness types in DALIBO CVEs?: DALIBO's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-328 (Use of Weak Hash), CWE-427 (Uncontrolled Search Path Element), CWE-20 (Improper Input Validation).
Are there public exploits for DALIBO vulnerabilities?: Yes — 3 of DALIBO's CVEs have a known public exploit.
What is the average severity of DALIBO CVEs?: The average CVSS base score across DALIBO's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track DALIBO vulnerabilities

Get an alert for each new DALIBO CVE, with AI-written analysis and remediation steps.

Create an account See pricing