—
GO-2026-5436
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin in github.com/julien040/anyquery/plugins/brave
Quick fix
GO-2026-5436 — github.com/julien040/anyquery/plugins/brave: upgrade to the fixed version with the command below.
go get github.com/julien040/anyquery/plugins/brave@v0.0.0-20240826075852-c651df0b8767Details
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS Chrome Plugin in github.com/julien040/anyquery/plugins/brave
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/julien040/anyquery/plugins/brave
Introduced in:
0Fixed in: 0.0.0-20240826075852-c651df0b8767Fix
go get github.com/julien040/anyquery/plugins/brave@v0.0.0-20240826075852-c651df0b8767Go/github.com/julien040/anyquery/plugins/chrome
Introduced in:
0Fixed in: 0.0.0-20240826075852-c651df0b8767Fix
go get github.com/julien040/anyquery/plugins/chrome@v0.0.0-20240826075852-c651df0b8767Go/github.com/julien040/anyquery/plugins/edge
Introduced in:
0Fixed in: 0.0.0-20240826075852-c651df0b8767Fix
go get github.com/julien040/anyquery/plugins/edge@v0.0.0-20240826075852-c651df0b8767Go/github.com/julien040/anyquery/plugins/safari
Introduced in:
0Fixed in: 0.0.0-20240826075852-c651df0b8767Fix
go get github.com/julien040/anyquery/plugins/safari@v0.0.0-20240826075852-c651df0b8767