VulnSocial

CVE-2026-110183

LOWCVSS 4.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg_stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL Anonymizer 3.3.0 and later versions.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-202

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-28: 110-28
Referenced assets1 URL
Full discourse1 post
  • 情報の灯台@joho_no_todai

    PostgreSQL用の匿名化拡張「PostgreSQL Anonymizer」で、表を書き換えた後も検索用の統計に元の値が残る問題があった。 3.3はこの問題を修正した。 https://joho-todai.com/postgresql-anonymizer-3-3-cve-2026-110183-statistical-disclosure-fix/ 元のデータを書き換える静的匿名化では、統計の再分析を試みる。 再分析に必要な権限がない場合、警告だけで処理が続くため、匿名化の終了と統計の更新完了を分けて確認する必要がある。

    0101001.2K
    13.2K followersView on X

Explore more

Back to dashboard