PostgreSQL Anonymizer fixes ways around data masking

PostgreSQL Anonymizer 3.3 fixes twelve vulnerabilities, including paths that could let masked users read personal data or gain privileges. The extension hides sensitive values for users, exports and other workflows. Its fixes also restrict masking rules and function execution, so upgrading can change existing behavior. Dalibo advises all users to upgrade and rotate the extension’s masking salt.

Dalibo · PostgreSQL · Oct 28, 2026

Why it matters

Masking protects data only when query planning, functions and metadata respect the same boundary.

More context

The October 28 announcement identifies the release as October 27. Review upgrade compatibility before deployment: subqueries in masking rules are now forbidden, and dynamic masking restricts SQL-standard function bodies. Packages and container distribution are documented.

Keep in mind

The announcement describes potential vulnerabilities, not a confirmed breach. Updating cannot undo prior exposure, and existing masking rules may need changes.

Original read