Skip to content
OpenAdvisories
Medium · 4.8 CVE-2026-105619 EUVD-2026-112291GHSA-322m-rvmj-q79h

PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views

Published Oct 28, 2026 · Updated Nov 5, 2026 · Assigned by PostgreSQL

Description

PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

Affected products

VendorProductAffectedFixed
DALIBO PostgreSQL Anonymizer 1 – < 3.3.0 3.3.0

References