CVE-2026-110183
CVE-2026-110183 · PostgreSQL Anonymizer: statistics can expose some of the original data after statistic masking
This page contains facts from public vulnerability sources. Check the original advisory before updating.
PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
CVSS 4.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
postgresql anonymizer
- Versions
- ≥ 1, < 3.3.0: Affected (semver)
Update to 3.3.0