Several security flaws found in PostgreSQL Anonymizer before version 3.3
France's national cyber agency CERT-FR issued an advisory on 29 October 2026 warning about multiple security vulnerabilities in PostgreSQL Anonymizer, a tool that hides or masks sensitive data in PostgreSQL databases. Some flaws could let a remote attacker crash the service, expose private data, or get around security rules. Versions before 3.3 are affected, and users are directed to the publisher's security bulletin for the patches.
What does it mean?
PostgreSQL Anonymizer is a tool that hides real personal details in databases so they can be shared for testing. Versions older than 3.3 have weaknesses that could let an outsider crash the tool or see data they should not. Anyone running an older version should update it using the fix from the software publisher.
Who is affected?
Organizations and developers who run PostgreSQL Anonymizer versions earlier than 3.3.