HIGH8.6Go
GHSA-hwrq-8wxh-q4xv· CVE-2026-54628, GO-2026-5988Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
Modified: 7/21/2026
package
Go/github.com/julien040/anyquery
pkg:go/github.com/julien040/anyquery
HIGH7.3Go
GHSA-j9rx-rppg-6hh4· CVE-2026-47253, GO-2026-5459Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion
Modified: 6/25/2026
HIGH7.5Go
GHSA-mf78-3rpf-r784· CVE-2026-54629, GO-2026-5990Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode
Modified: 7/21/2026
CRITICAL9.1Go
GHSA-xrcf-6jh3-ggvx· CVE-2026-50006, GO-2026-5979Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
Modified: 7/21/2026
—Go
GO-2026-5459· CVE-2026-47253, GHSA-j9rx-rppg-6hh4Anyquery has Path Traversal through `clear_plugin_cache`, Allowing Arbitrary Directory Deletion in github.com/julien040/anyquery
Modified: 6/25/2026
—Go
GO-2026-5979· CVE-2026-50006, GHSA-xrcf-6jh3-ggvxAnyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode in github.com/julien040/anyquery
Modified: 7/21/2026
—Go
GO-2026-5988· CVE-2026-54628, GHSA-hwrq-8wxh-q4xvAnyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery
Modified: 7/21/2026
—Go
GO-2026-5990· CVE-2026-54629, GHSA-mf78-3rpf-r784Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode in github.com/julien040/anyquery
Modified: 7/21/2026