Dalibo vulnerabilities
We track 7 vulnerabilities in Dalibo products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 6, 2026.
Latest Dalibo vulnerabilities
- 8.8 High severity
PostgreSQL Anonymizer: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to execute arbitrary code by abusing operators, domain casts, or view subqueries that carry untrusted expressions. When these objects are evaluated in the context of the exten
- 7.5 High severity
PostgreSQL Anonymizer: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a JSON document and placing malicious code inside a particular key-value pair. If a superuser calls the import_database_rules() or import_roles_rules() f
- 8.8 High severity
PostgreSQL Anonymizer: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a table and placing malicious code inside a column identifier. If a superuser calls the k-anonymity function, the malicious code is executed with superus
- 8.0 High severity
PostgreSQL Anonymizer: Uncontrolled Search Path Element
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a temporary view based on a function containing malicious code. When the anon.get_tablesample_ratio function is then called, the malicious code is execut
- 8.0 High severity
PostgreSQL Anonymizer: Uncontrolled Search Path Element
PostgreSQL Anonymizer contains a vulnerability that allows a user to gain superuser privileges by creating a custom operator in the public schema and place malicious code in that operator. This operator will later be executed with superuser privileges when the
- 8.8 High severity
PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to…
PostgreSQL Anonymizer v1.2 contains a vulnerability that allows a user who owns a table to elevate to superuser. A user can define a masking function for a column and place malicious code in that function. When a privileged user applies the masking rules using
- 7.5 High severity
PostgreSQL Anonymizer: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL Anonymizer v1.2 contains a SQL injection vulnerability that allows a user who owns a table to elevate to superuser when dynamic masking is enabled. PostgreSQL Anonymizer enables users to set security labels on tables to mask specified columns. There