Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-13455
4.3
MEDIUMCVSS v3
Published
June 30, 2026
Affected
1 project
Assigned by
f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Severity scale
010
Description
PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later versions
dalibo/postgresql_anonymizerGitLab🐘🕶️ Anonymization & Data Masking for **PostgreSQL**
https://labs.dalibo.com/postgresql_anonymizer
GitLab🐘🕶️ Anonymization & Data Masking for **PostgreSQL**
https://labs.dalibo.com/postgresql_anonymizer<= 3.1.2NVD