# Dalibo PostgreSQL Anonymizer vulnerabilities Source: https://junglewise.ai/threats/technologies/postgresql-anonymizer Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/postgresql-anonymizer.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in Dalibo PostgreSQL Anonymizer: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-110183, was published on 28 October 2026. 10 vulnerabilities in the last four weeks, up 900% on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 10 - Last 90 days: 14 - All time: 17 (0 critical, 0 exploited in the wild) ## About Dalibo PostgreSQL Anonymizer An extension to mask or replace personally identifiable information or sensitive data from a PostgreSQL database. ## Latest Dalibo PostgreSQL Anonymizer vulnerabilities - [CVE-2026-110183: PostgreSQL Anonymizer statistics leak in static masking](https://junglewise.ai/threats/cve-2026-110183-postgresql-anonymizer-contains-a-vulnerability-related-to-static) (medium, CVSS 4.3, published 28 Oct 2026) - [CVE-2026-110182: PostgreSQL Anonymizer information disclosure in partial() functions](https://junglewise.ai/threats/cve-2026-110182-postgresql-anonymizer-contains-a-vulnerability-related-to-the) (medium, CVSS 4.3, published 28 Oct 2026) - [CVE-2026-110181: PostgreSQL Anonymizer SQL-standard function body bypass](https://junglewise.ai/threats/cve-2026-110181-postgresql-anonymizer-contains-a-vulnerability-related-to) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-105620: PostgreSQL Anonymizer data masking bypass in sub-query rules](https://junglewise.ai/threats/cve-2026-105620-postgresql-anonymizer-doesn-t-mask-data-returned-by-a-sub-query) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-105619: PostgreSQL Anonymizer data masking bypass in security_invoker views](https://junglewise.ai/threats/cve-2026-105619-postgresql-anonymizer-doesn-t-mask-data-accessed-thru-a-security) (medium, CVSS 4.8, published 28 Oct 2026) - [CVE-2026-105618: PostgreSQL Anonymizer data masking bypass on inherited tables](https://junglewise.ai/threats/cve-2026-105618-postgresql-anonymizer-s-documentation-recommends-applying-rules) (medium, CVSS 5.7, published 28 Oct 2026) - [CVE-2026-105617: PostgreSQL Anonymizer prepared plan cache invalidation bypass](https://junglewise.ai/threats/cve-2026-105617-postgresql-anonymizer-doesn-t-invalidate-plans-prepared-after-a) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-105616: PostgreSQL Anonymizer information disclosure of salt and shift values](https://junglewise.ai/threats/cve-2026-105616-postgresql-restricts-acces-to-the-salt-and-shift-via-the-show) (medium, CVSS 5.7, published 28 Oct 2026) - [CVE-2026-105614: PostgreSQL Anonymizer image_blur function memory exhaustion](https://junglewise.ai/threats/cve-2026-105614-postgresql-anonymizer-s-anon-image-blur-function-doesn-t-check) (medium, CVSS 4.7, published 28 Oct 2026) - [CVE-2026-105613: PostgreSQL Anonymizer unconstrained range-based dummy function memory exhaustion](https://junglewise.ai/threats/cve-2026-105613-postgresql-anonymizer-s-range-based-dummy-functions-dont) (medium, CVSS 4.7, published 28 Oct 2026) - [CVE-2026-97469: PostgreSQL Anonymizer restricted function bypass in anon.hash()](https://junglewise.ai/threats/cve-2026-97469-postgresql-anonymizer-contains-a-vulnerability-that-allows) (medium, CVSS 4.3, published 25 Sep 2026) - [CVE-2026-83534: PostgreSQL Anonymizer privilege escalation in anon.anonymize_database_parallel()](https://junglewise.ai/threats/cve-2026-83534-postgresql-anonymizer-privilege-escalation-in-anon-anonymize) (medium, CVSS 6.4, published 6 Sep 2026) - [CVE-2026-19634: PostgreSQL Anonymizer SQL injection in import functions](https://junglewise.ai/threats/cve-2026-19634-postgresql-anonymizer-sql-injection-in-import-functions) (medium, CVSS 6.4, published 6 Sep 2026) - [CVE-2026-19633: PostgreSQL Anonymizer privilege escalation via operators and domain casts](https://junglewise.ai/threats/cve-2026-19633-postgresql-anonymizer-privilege-escalation-via-operators-and) (high, CVSS 8.8, published 6 Sep 2026) - [CVE-2026-13455: DALIBO PostgreSQL Anonymizer weak hashing in anon.hash function](https://junglewise.ai/threats/cve-2026-13455-dalibo-postgresql-anonymizer-weak-hashing-in-anon-hash-function) (medium, CVSS 4.3, published 30 Jun 2026) - [CVE-2026-11945: Dalibo PostgreSQL Anonymizer SQL injection in rule import functions](https://junglewise.ai/threats/cve-2026-11945-dalibo-postgresql-anonymizer-sql-injection-in-rule-import) (medium, CVSS 6.4, published 11 Jun 2026) - [CVE-2026-9617: PostgreSQL Anonymizer privilege escalation via SQL injection in k-anonymity](https://junglewise.ai/threats/cve-2026-9617-postgresql-anonymizer-privilege-escalation-via-sql-injection-in-k) (medium, CVSS 6.8, published 27 May 2026) ## Most severe Dalibo PostgreSQL Anonymizer vulnerabilities - [CVE-2026-19633: PostgreSQL Anonymizer privilege escalation via operators and domain casts](https://junglewise.ai/threats/cve-2026-19633-postgresql-anonymizer-privilege-escalation-via-operators-and) (high, CVSS 8.8, published 6 Sep 2026) - [CVE-2026-9617: PostgreSQL Anonymizer privilege escalation via SQL injection in k-anonymity](https://junglewise.ai/threats/cve-2026-9617-postgresql-anonymizer-privilege-escalation-via-sql-injection-in-k) (medium, CVSS 6.8, published 27 May 2026) - [CVE-2026-110181: PostgreSQL Anonymizer SQL-standard function body bypass](https://junglewise.ai/threats/cve-2026-110181-postgresql-anonymizer-contains-a-vulnerability-related-to) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-105620: PostgreSQL Anonymizer data masking bypass in sub-query rules](https://junglewise.ai/threats/cve-2026-105620-postgresql-anonymizer-doesn-t-mask-data-returned-by-a-sub-query) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-105617: PostgreSQL Anonymizer prepared plan cache invalidation bypass](https://junglewise.ai/threats/cve-2026-105617-postgresql-anonymizer-doesn-t-invalidate-plans-prepared-after-a) (medium, CVSS 6.5, published 28 Oct 2026) - [CVE-2026-83534: PostgreSQL Anonymizer privilege escalation in anon.anonymize_database_parallel()](https://junglewise.ai/threats/cve-2026-83534-postgresql-anonymizer-privilege-escalation-in-anon-anonymize) (medium, CVSS 6.4, published 6 Sep 2026) - [CVE-2026-19634: PostgreSQL Anonymizer SQL injection in import functions](https://junglewise.ai/threats/cve-2026-19634-postgresql-anonymizer-sql-injection-in-import-functions) (medium, CVSS 6.4, published 6 Sep 2026) - [CVE-2026-11945: Dalibo PostgreSQL Anonymizer SQL injection in rule import functions](https://junglewise.ai/threats/cve-2026-11945-dalibo-postgresql-anonymizer-sql-injection-in-rule-import) (medium, CVSS 6.4, published 11 Jun 2026) - [CVE-2026-105618: PostgreSQL Anonymizer data masking bypass on inherited tables](https://junglewise.ai/threats/cve-2026-105618-postgresql-anonymizer-s-documentation-recommends-applying-rules) (medium, CVSS 5.7, published 28 Oct 2026) - [CVE-2026-105616: PostgreSQL Anonymizer information disclosure of salt and shift values](https://junglewise.ai/threats/cve-2026-105616-postgresql-restricts-acces-to-the-salt-and-shift-via-the-show) (medium, CVSS 5.7, published 28 Oct 2026) ## Vulnerabilities per week 10 vulnerabilities in the last four weeks, up 900% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 3 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 1 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 10 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Dalibo PostgreSQL Anonymizer vulnerabilities", https://junglewise.ai/threats/technologies/postgresql-anonymizer, 9 November 2026.