Anyquery
Julien040 · 6 CVEs
CVE-2026-47252
CRITICAL
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)
Sep 17, 2026
CVE-2026-54628
HIGH
Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
Sep 14, 2026
CVE-2026-50006
CRITICAL
Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE i…
Sep 14, 2026
CVE-2026-54629
HIGH
Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode
Sep 14, 2026
CVE-2026-47253
HIGH
Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion
Sep 14, 2026
CVE-2025-61679
HIGH
Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data
Oct 3, 2025
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-47252 | Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) | CRITICAL | 0.70% | Sep 17, 2026 |
| CVE-2026-54628 | Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode | HIGH | 0.60% | Sep 14, 2026 |
| CVE-2026-50006 | Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode | CRITICAL | 0.97% | Sep 14, 2026 |
| CVE-2026-54629 | Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode | HIGH | 0.97% | Sep 14, 2026 |
| CVE-2026-47253 | Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion | HIGH | 0.44% | Sep 14, 2026 |
| CVE-2025-61679 | Anyquery Unauthenticated Access Vulnerability Exposes Private Integration Data | HIGH | 0.15% | Oct 3, 2025 |
Showing 1 to 6 of 6 CVEs