How many dalibo postgresql_anonymizer CVEs are in CISA KEV?

None of dalibo postgresql_anonymizer's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of dalibo postgresql_anonymizer are affected?

50 distinct dalibo postgresql_anonymizer versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in dalibo postgresql_anonymizer CVEs?

dalibo postgresql_anonymizer's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-328 (Use of Weak Hash), CWE-427 (Uncontrolled Search Path Element), CWE-20 (Improper Input Validation).

What is the average severity of dalibo postgresql_anonymizer CVEs?

The average CVSS base score across dalibo postgresql_anonymizer's scored CVEs is 7.2.

RadicalNotion.AI

Log in Create an account

dalibo

12 CVEs

dalibo postgresql_anonymizer Vulnerabilities

Name: dalibo postgresql_anonymizer vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for postgresql_anonymizer by dalibo.

12

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

3

Public exploits

PoC or exploit code

7.2

Avg CVSS

2024–2026

Last updated September 25, 2026

Overview

dalibo postgresql_anonymizer has 12 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 7.2.

Severity and exploitation

How the CVSS severity of dalibo postgresql_anonymizer's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High7

Medium5

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of dalibo postgresql_anonymizer's CVEs are currently listed in CISA's KEV catalog.

Public exploits

3

3 of dalibo postgresql_anonymizer's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every dalibo postgresql_anonymizer version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

0.0.12 CVEs
0.0.32 CVEs
0.1.12 CVEs
0.10.02 CVEs
0.11.02 CVEs
0.12.02 CVEs
0.2.12 CVEs
0.3.02 CVEs
0.3.12 CVEs
0.4.02 CVEs
0.4.12 CVEs
0.5.02 CVEs
0.6.02 CVEs
0.7.02 CVEs
0.7.12 CVEs
0.8.02 CVEs
0.9.02 CVEs
1.0.02 CVEs
1.1.02 CVEs
1.2.02 CVEs
2.5.11 CVE

Version ranges

1 <= v < 1.3.02 CVEs
1 <= v < 3.0.12 CVEs
1 <= v < 3.1.42 CVEs
< 3.1.11 CVE
<= 3.1.21 CVE
1 <= v < 2.2.11 CVE
1 <= v < 3.1.01 CVE
1 <= v < 3.1.11 CVE
1 <= v < 3.1.21 CVE
1 <= v < 3.2.01 CVE
1 <= v < 3.2.31 CVE

Fixed in

1.3.02 CVEs
3.0.12 CVEs
3.1.42 CVEs
b13a74ad3fe6b95c15aae6055d25e4669f7f29202 CVEs
2.2.11 CVE
3.1.01 CVE
3.1.11 CVE
3.1.21 CVE
3.2.01 CVE
3.2.31 CVE
5e3e4556e53a5535f47de3f7f99571023933a0c11 CVE
8f37288202b872a3ab11bea770bb5cfd8450f6971 CVE
93c55744e9e5bdf4a18e88082dbfa0ad0ff22f101 CVE

Find a version

12 CVEs

Sort

PostgreSQL Anonymizer: RESTRICTED functions are reachable through a subLink
CVE-2026-97469
Patch
Workaround
CWE-328
Medium · CVSS 4.3
EPSS 0.1% (2th pct)2026-09-25
PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()
CVE-2026-83534
Patch
Workaround
CWE-250
Medium · CVSS 6.4
EPSS 0.2% (8th pct)2026-09-06
PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSON
CVE-2026-19634
Patch
Workaround
CWE-89
Medium · CVSS 6.4
EPSS 0.2% (8th pct)2026-09-06
PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueries
CVE-2026-19633
Patch
CWE-89
High · CVSS 8.8
EPSS 0.4% (34th pct)2026-09-06
PostgreSQL Anonymizer: Unrestricted function can leak the secret salt
CVE-2026-13455
Patch
Workaround
CWE-328
Medium · CVSS 4.3
EPSS 0.2% (8th pct)2026-06-30
PostgreSQL Anonymizer: SQL injection in the rules import functions
CVE-2026-11945
Public exploit
Patch
Workaround
CWE-89
High · CVSS 7.5
EPSS 0.2% (15th pct)2026-06-11
PostgreSQL Anonymizer: malicious column name allows SQL injection via anon.k_anonymity() function
CVE-2026-9617
Public exploit
Patch
Workaround
CWE-89
High · CVSS 8.8
EPSS 0.4% (36th pct)2026-05-27
Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user with create privilege to gain superuser privileges
CVE-2026-2361
Patch
Workaround
CWE-427
High · CVSS 8.0
EPSS 0.3% (24th pct)2026-02-11
Improper search_path protection in PostgreSQL Anonymizer 2.5 allows any user to gain superuser privileges in PostgreSQL 14
CVE-2026-2360
Patch
Workaround
CWE-427
High · CVSS 8.0
EPSS 0.5% (40th pct)2026-02-11
Cursor allows PostgreSQL Anonymizer masked user to gain unauthorized access to authentic data
CVE-2025-5690
Public exploit
Patch
Workaround
CWE-200
Medium · CVSS 6.5
EPSS 0.3% (27th pct)2025-06-04
High vulnerability · 2024-03-08
CVE-2024-2339
Patch
Workaround
CWE-20
High · CVSS 8.8
EPSS 0.6% (45th pct)2024-03-08
High vulnerability · 2024-03-08
CVE-2024-2338
Patch
Workaround
CWE-89
High · CVSS 8.0
EPSS 0.5% (39th pct)2024-03-08

Common weakness types

The CWE weakness categories most often found in dalibo postgresql_anonymizer CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many dalibo postgresql_anonymizer CVEs were published each year.

2024

2

2025

1

2026

9

Other dalibo products

Browse vulnerabilities for other products by dalibo.

anonymizer3 CVEs

All dalibo vulnerabilities

Frequently asked questions

Common questions about dalibo postgresql_anonymizer vulnerabilities.

How many CVEs does dalibo postgresql_anonymizer have?: dalibo postgresql_anonymizer has 12 published CVE records since 2024.
How many dalibo postgresql_anonymizer CVEs are in CISA KEV?: None of dalibo postgresql_anonymizer's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for dalibo postgresql_anonymizer vulnerabilities?: Yes — 3 of dalibo postgresql_anonymizer's CVEs have a known public exploit.
Which versions of dalibo postgresql_anonymizer are affected?: 50 distinct dalibo postgresql_anonymizer versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in dalibo postgresql_anonymizer CVEs?: dalibo postgresql_anonymizer's CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-328 (Use of Weak Hash), CWE-427 (Uncontrolled Search Path Element), CWE-20 (Improper Input Validation).
What is the average severity of dalibo postgresql_anonymizer CVEs?: The average CVSS base score across dalibo postgresql_anonymizer's scored CVEs is 7.2.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track dalibo postgresql_anonymizer vulnerabilities

Get an alert for each new dalibo postgresql_anonymizer CVE, with AI-written analysis and remediation steps.

Create an account See pricing

cd28788d0dfb48615fc680dd36c021235b8c1c76

1 CVE

d5411925d6467dc000ca4ea34a5818c4cb7d53351 CVE

d9c13addf015e4c92b53e0e0a23f23a687042ae71 CVE

e517b38e62e50871b04011598e73a7308bdae9d91 CVE

f55daadba3fa8226029687964aa8889d01a797781 CVE