julien040/anyquery Security Advisories | GitStock

high2026-07-14

Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode

GHSA-mf78-3rpf-r784 · CVE-2026-54629

high2026-07-14

Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode

GHSA-hwrq-8wxh-q4xv · CVE-2026-54628

critical2026-07-14

Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode

GHSA-xrcf-6jh3-ggvx · CVE-2026-50006

high2026-06-10

Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion

GHSA-j9rx-rppg-6hh4 · CVE-2026-47253

critical2026-06-08

Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin

GHSA-hrj8-hjv8-mgwc · CVE-2026-47252