PostgreSQL Anonymizer versions prior to 3.3.0 do not invalidate prepared query plans after a rule is added or a role is changed. This allows users executing such prepared plans to see unmasked data until the session ends. The issue is fixed in version 3.3.0 and later.