[ CVE-2026-110182 · Published 28 Oct 2026 ]
Vulnerability in DALIBO PostgreSQL Anonymizer
CVSS 4.3
EPSS <1%1 agency advisoryNo fix listed yet
[ Description ]Official description
PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These function can reveal the while data if the data is small enough. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1413
Multiple vulnerabilities in PostgreSQL Anonymizer Translated from French
Multiple vulnerabilities have been discovered in PostgreSQL Anonymizer. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality and a security policy bypass.