CVSS 4.3 (medium) · published 2026-10-28
PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
Affected products (NVD): dalibo postgresql_anonymizer
Fixed in (NVD): 3.3.0
Weakness: CWE-202
Source: NVD CVE-2026-110183
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.