| Package | Affected versions | Patched versions |
|---|---|---|
| postgresql anonymizer | ≤ 3.1.2 |
PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later versions
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free