CVE-2026-110183

EUVD-2026-112296
PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
PostgreSQLCNA
4.3 MEDIUM
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
dalibopostgresql_anonymizer
𝑥
< 3.3.0
CNA
Common Weakness Enumeration
References
https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/722