Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-19633
By Nevo Evenhaim |
7 September 2026
PostgreSQL Anonymizer masking bypass allows unprivileged users to run code via untrusted expressions
PostgreSQL Anonymizer < 3.1.4 lets unprivileged masked users execute arbitrary code by abusing operators, domain casts, or view subqueries containing untrusted expressions that are evaluated by masking mechanisms, causing execution with elevated privileges. Upgrade to PostgreSQL Anonymizer 3.1.4 or higher to mitigate.