Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-47252
  • github.com/julien040/anyquery
 Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) 17 Sep
  • Fix available
  • Severity - 9.0 (Critical)
CVE-2026-54628
  • github.com/julien040/anyquery
 Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode 14 Sep
  • Fix available
  • Severity - 8.6 (High)
CVE-2026-50006
  • github.com/julien040/anyquery
 Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode 14 Sep
  • Fix available
  • Severity - 9.1 (Critical)
CVE-2026-54629
  • github.com/julien040/anyquery
 Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode 14 Sep
  • Fix available
  • Severity - 7.5 (High)
CVE-2026-47253
  • github.com/julien040/anyquery
 Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion 14 Sep
  • Fix available
  • Severity - 7.3 (High)
GO-2026-5979
  • Go/github.com/julien040/anyquery
 Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode in github.com/julien040/anyquery 17 Jul
  • No fix available
GO-2026-5988
  • Go/github.com/julien040/anyquery
 Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery 17 Jul
  • No fix available
GO-2026-5990
  • Go/github.com/julien040/anyquery
 Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery 17 Jul
  • No fix available
GHSA-mf78-3rpf-r784
  • Go/github.com/julien040/anyquery
 Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode 14 Jul
  • No fix available
  • Severity - 7.5 (High)
GHSA-hwrq-8wxh-q4xv
  • Go/github.com/julien040/anyquery
 Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode 14 Jul
  • No fix available
  • Severity - 8.6 (High)
GHSA-xrcf-6jh3-ggvx
  • Go/github.com/julien040/anyquery
 Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode 14 Jul
  • No fix available
  • Severity - 9.1 (Critical)
GO-2026-5436
  • Go/github.com/julien040/anyquery/plugins/brave
  • Go/github.com/julien040/anyquery/plugins/chrome
  • Go/github.com/julien040/anyquery/plugins/edge
  • Go/github.com/julien040/anyquery/plugins/safari
 Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin in github.com/julien040/anyquery/plugins/brave 25 Jun
  • Fix available
GO-2026-5459
  • Go/github.com/julien040/anyquery
 Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion in github.com/julien040/anyquery 25 Jun
  • No fix available
GHSA-j9rx-rppg-6hh4
  • Go/github.com/julien040/anyquery
 Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion 10 Jun
  • Fix available
  • Severity - 7.3 (High)
GHSA-hrj8-hjv8-mgwc
  • Go/github.com/julien040/anyquery/plugins/brave
  • Go/github.com/julien040/anyquery/plugins/chrome
  • Go/github.com/julien040/anyquery/plugins/edge
  • Go/github.com/julien040/anyquery/plugins/safari
 Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin 08 Jun
  • Fix available
  • Severity - 9.0 (Critical)
CVE-2025-61679
  • github.com/julien040/anyquery
 Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data 03 Oct 2025
  • Fix available
  • Severity - 7.7 (High)