PostgreSQL Anonymizer fixes ways around data masking
PostgreSQL Anonymizer 3.3 fixes twelve vulnerabilities, including paths that could let masked users read personal data or gain privileges. The extension hides sensitive values for users, exports and other workflows. Its fixes also restrict masking rules and function execution, so upgrading can change existing behavior. Dalibo advises all users to upgrade and rotate the extension’s masking salt.
Dalibo · PostgreSQL · Oct 28, 2026