6 matches found
CVE-2026-105612
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...
CVE-2026-105615
The PostgreSQL Anonymizer extension is vulnerable to the exposure of sensitive information. Users with SELECT privilege on a table can access optimized statistics through the pg_stats view, allowing masked roles to read a limited subset of data via histograms and mcvs . This vulnerability is reso...
EUVD-2026-112284
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...
CVE-2026-105612 PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...
CVE-2026-105612
The PostgreSQL Anonymizer extension is vulnerable to a security bypass where data-modifying Common Table Expressions (CTEs) can circumvent the read-only restrictions imposed on masked roles. This issue is associated with CWE-862 (Missing Authorization) . The vulnerability is addressed in PostgreS...
PT-2026-129066
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions...