Security releases

Researcher credits in vendor advisories

Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.

Vendor

These 12 releases credit 12 lines. 12 are still open to claim.

One mark per credit line Open Claimed

Dalibo CVE-2026-110183

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible i

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-110182

PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions. These function can reveal the while data if the

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-110181

PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function bodies. PostgreSQL analyses such functions

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105620

PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105619

PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105618

PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables. Direct access to the paritions / inheritance tables is mas

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105617

PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed. Users using such plans can still see the unmasked data until t

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105616

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. But they are visible in `pg_db_role_sett

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105615

PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset o

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105614

PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided image, allowing an attacker to provide a small image w

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105613

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and O

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit
Dalibo CVE-2026-105612

PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreS

1 CVE and 1 credit line. Not claimed yet.

0 of 1 credit line claimed Claim credit