PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions at declaration time, while Anonymizer only attempts to check them at execution time. This problem can be exploited by any user with the TEMPORARY privilege. The issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 4
- StatusReceived → PublishedNVD modified 2026-10-28 17:31
- StatusPublished → ReceivedNVD modified 2026-10-28 18:17
- StatusReceived → PublishedNVD modified 2026-10-28 17:31
- First seenCVSS 6.5NVD modified 2026-10-28 18:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.