CVE-2026-105612

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

EUVD-2026-112284

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105612 PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105612 PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

CVE-2026-105612

The PostgreSQL Anonymizer extension is vulnerable to a security bypass where data-modifying Common Table Expressions (CTEs) can circumvent the read-only restrictions imposed on masked roles. This issue is associated with CWE-862 (Missing Authorization) . The vulnerability is addressed in PostgreS...

CVE-2026-105612: Missing Authorization

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

PT-2026-129066

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...

EUVD-2026-45904

SurrealDB: Writes in a PERMISSIONS clause bypass table permissions...

Duplicate Advisory: Writes in a PERMISSIONS clause bypass table permissions

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-66r2-5gwj-gxm2. This link is maintained to preserve external references. Original Description SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within...

CVE-2026-63733 SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...

CVE-2026-63733 SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a guarded operation can write to tables they lack permission for by embedding CREATE, UPDAT...

Oracle WebLogic Server input validation error vulnerability

Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...