{"affected":[{"defaultStatus":"unaffected","product":"PostgreSQL Anonymizer","source":"CNA: PostgreSQL","vendor":"DALIBO","versions":[{"lessThan":"3.3.0","status":"affected","version":"1","versionType":"semver"}]}],"cveId":"CVE-2026-105619","cwes":["CWE-862"],"description":"PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.","epss":{"date":"2026-11-05","percentile":0.04254,"score":0.00151},"exploits":[],"kev":null,"metrics":[{"score":4.8,"severity":"medium","source":"CNA: PostgreSQL","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},{"score":4.8,"severity":"medium","source":"NVD: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793899054203,"publishedAt":1793208709949,"references":[{"source":"CNA: PostgreSQL","tags":[],"url":"https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/697"},{"source":"f86ef6dc-4d3a-42ad-8f28-e6d5547a5007","tags":[],"url":"https://gitlab.com/dalibo/postgresql_anonymizer/-/issues/697"}],"remediation":[{"kind":"workaround","source":"CNA: PostgreSQL","text":"Place masking rules directly on the views that are defined with `security_invoker = true`."}],"revision":"334604ca78cf4d8362d40910e97468482d5e66cd93d70a96fd2abc7f23986e3c","sources":[{"modifiedAt":1793897580718,"name":"CNA: PostgreSQL","retrievedAt":1793898580864,"url":"https://www.cve.org/CVERecord?id=CVE-2026-105619"},{"modifiedAt":1793899054203,"name":"NVD","retrievedAt":1793902943058,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105619"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793898594877,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-105619"}],"ssvc":{"assessedAt":1793897571078,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"PostgreSQL Anonymizer: Masking rules of the tables are not applied through security_invoker views","updatedAt":1793902943058}