CVE WATCH / VULNERABILITY DETAIL

CVE-2026-105613

MEDIUMCVSS 4.7NVD feed

Published 28 October 2026 · tracked since 29 October 2026

Description

PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ovecommit is on), which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 an

References

Latest tracked vulnerabilities

→ Open the live CVE board · all tools